31.171.130.120

Classification: Malicious

31.171.130.120 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-11. Network: AS206092 Netrouting B.V..

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • VPN node — Provides anonymization that can hide an attacker.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Empty reason Blocklist.net.ua 2026-09-04 16:07:50 2026-09-11 16:05:59 attacker malicious-activity
DDoS Attacker Blocklist.net.ua 2026-02-11 12:29:02 2026-09-10 16:06:19 attacker malicious-activity
HTTP Spammer StopForumSpam.com 2024-12-01 03:42:44 2026-09-09 07:06:37 attacker malicious-activity
VPN IPWhois.io 2024-12-01 03:42:45 2026-09-05 08:46:29 anonymization vpn
Suspicious Host AbuseIPDB 2024-12-29 18:33:44 2026-06-03 00:46:19 anomalous-activity
Malicious Host AbuseIPDB 2025-12-24 00:02:23 2026-05-23 21:31:31 malicious-activity
HTTP Attacker Blocklist.de 2025-12-24 06:29:50 2025-12-24 06:29:50 malicious-activity
HTTP Spammer Sblam 2025-08-13 07:53:49 2025-08-16 06:38:22 malicious-activity
HTTP Spammer Cleantalk.org 2025-07-05 15:06:51 2025-07-05 15:06:51 malicious-activity
Proxy IPWhois.io 2025-01-29 12:19:12 2025-03-31 11:32:44 anonymization

Tags

bot abuse apache ddos rfi attacker

Whois information

AS name
AS206092 Netrouting B.V.
AS registry
ripencc
AS date
2011-03-31 00:00:00
AS CIDR
31.171.130.0/24
Registrant
Netrouting B.V.
City
London
Postal code
EC2R 5
Country
GB — United Kingdom 🇬🇧
First indexed
2024-12-01 03:42:44
Last updated
2026-09-11 16:06:00

Malicious IPs in the same CIDR

31.171.130.122 31.171.130.138 31.171.130.143 31.171.130.147 31.171.130.156 31.171.130.162 31.171.130.120 31.171.130.144 31.171.130.150 31.171.130.164 31.171.130.139 31.171.130.140 31.171.130.146 31.171.130.151 31.171.130.157 31.171.130.133 31.171.130.136 31.171.130.148 31.171.130.152 31.171.130.163 31.171.130.79 31.171.130.82 31.171.130.91 31.171.130.103 31.171.130.104