31.59.102.138 Threat Intelligence and Host Information

General

IP Address
31.59.102.138
IPv4 Address
Location
🇮🇷 Iran
IR
Network
AS58224
Iran Telecommunication Company PJS
Threat Score
39/100
Medium Risk
bruteforceBruteforceBrute-Forcecowriemaliciousportscanscannerssftp
Attack Intelligence
Open Ports Detected
22
Geographic Location
Country
Iran
City
Unknown
Region
Unknown
Coordinates
35.6980, 51.4115
Network Information
ASN
AS58224
Organization
Iran Telecommunication Company PJS
Network
AS58224 Iran Telecommunication Company PJS
WHOIS Information
inetnum
31.59.102.0 - 31.59.102.255
netname
CloudBackbone
country
HK
abuse-c
AR68415-RIPE
org
ORG-CGL23-RIPE
geofeed
https://as56971.net/geofeed.csv
admin-c
CA10669-RIPE
tech-c
CA10669-RIPE
status
ASSIGNED PA
created
2025-12-23T12:12:40Z
last-modified
2025-12-23T12:12:40Z
mnt-by
GOLD-MNT
organisation
ORG-CGL23-RIPE
org-name
CGI GLOBAL LIMITED
org-type
LIR
address
Espoo, Finland
phone
+358415733138
mnt-ref
GOLD-MNT
person
Farhad Soltani
nic-hdl
FS18656-RIPE
route
31.59.102.0/24
origin
AS56971
descr
CloudBackbone
Attack Logs
Date Target Location Protocol Link
2026-03-10 Vultrmelbournetest SSH View Log

  • Country: Iran
  • Network:
  • Noticed: 6 times
  • Protocols Attacked: portscan ssh

Malware Detected on Host

Count: 1 2a0092ea48f6a590465ae5e2de0b01a19e66c87951728fee19e6e9200c3a32fb

CVEs Detected

CVE-2023-44487 CVE-2025-23419

Disclaimer
This page contains threat intelligence information for the IPv4 address 31.59.102.138 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.