31.56.137.22
Classification: Malicious
31.56.137.22 is a malicious IP address. Reported by 3 threat sources, last seen 2026-09-05. Network: AS9009 Private Customer.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | Blocklist.net.ua | 2026-07-06 16:01:01 | 2026-09-05 16:05:47 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-04 16:07:21 | 2026-09-04 16:07:21 | attacker malicious-activity | |
| Proxy | FireHOL | 2025-01-01 20:17:32 | 2025-03-30 13:24:27 | anonymization | |
| Proxy | IPWhois.io | 2025-03-23 11:33:27 | 2025-03-23 11:33:27 | anonymization | |
| VPN | IPWhois.io | 2025-01-01 20:17:33 | 2025-01-01 20:17:33 | anonymization |
Tags
anonymization abuseWhois information
- AS name
- AS9009 Private Customer
- AS registry
- ripencc
- AS date
- 2011-01-28 00:00:00
- AS CIDR
- 31.56.137.0/24
- Registrant
- Private Customer
- City
- Montreal
- Postal code
- H3A 2A6
- Country
- CA — Canada 🇨🇦
- First indexed
- 2025-01-01 20:17:32
- Last updated
- 2026-09-05 16:05:47
Malicious IPs in the same CIDR
31.56.137.74 31.56.137.72 31.56.137.4 31.56.137.6 31.56.137.108 31.56.137.22 31.56.137.79 31.56.137.102 31.56.137.131 31.56.137.40 31.56.137.114