113.31.186.197
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Shanghai UCloud Information Technology Company Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS4811
- Domain Name
- ucloud.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
1,102 from
240 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
2026-11-08T16:19:27.324214+01:00 postfix/smtpd[2116737]: improper command pipelining after CONNECT from unknown[113.31.186.197]:
|
Email Spam | |
| 🇺🇸 en0 |
113.31.186.197 was recorded 5 times by 1 hosts attempting to connect to 4 unique ports. Incident counter (4h, 24h, all-time): 5, 32, 2106
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 2 application-level events across 2 source port(s). Sensor(s): Tanner.
|
Port Scan | |
| 🇺🇸 en0 |
113.31.186.197 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 27, 2095
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 5 packets across 1 port (80). | Evidence: REAPER_TARPIT: IN=eth0 SRC=113.31.186.197 LEN=40 TOS=0x14 PREC=0x00 TTL=44 ID=57232 DF PROTO=TCP SPT=12774 DPT=80 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| Anonymous |
|
Web App Attack Port Scan | |
| 🇺🇸 Zestysoft |
|
Port Scan | |
| 🇺🇸 en0 |
113.31.186.197 was recorded 4 times by 1 hosts attempting to connect to 2 unique ports. Incident counter (4h, 24h, all-time): 4, 22, 2090
|
Port Scan | |
| 🇺🇸 SX Communications |
HTTP application-layer DoS / botnet traffic from 113.31.186.197: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇫🇷 Entalpi.net |
Known exploit / shellcode injection attempt / network protocol violation, may be port scanning false positive
|
Hacking | |
| 🇺🇸 en0 |
113.31.186.197 was recorded 7 times by 1 hosts attempting to connect to 6 unique ports. Incident counter (4h, 24h, all-time): 7, 12, 2080
|
Port Scan | |
| 🇩🇪 rd1742 |
2026-11-07T14:51:01.717327+00:00 pat postfix/smtps/smtpd[199653]: warning: non-SMTP command from unknown[113.31.186.197]: GET / HTTP/1.1
...
|
Port Scan Hacking | |
| 🇨🇿 unhfree.net |
|
Brute-Force Exploited Host | |
| 🇩🇪 klaus_ph |
113.31.186.197 - - [07/Nov/2026:14:10:57 +0100] "GET / HTTP/1.1" 301 576 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
...
|
Bad Web Bot | |
| 🇺🇸 cybsecaoccol |
Brute Force SASL Attack
|
Hacking Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown