JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.11.106.253

Activity Trending Down

Abuse confidence score ?

50% Elevated

16 reports

13 reporters · latest 2 weeks ago

ISP	PPPoE Broadband Internet
Usage Type	Fixed Line ISP
ASN	AS16333
Domain Name	a1.mk
Country	🇲🇰 North Macedonia
City	Tetovo, Tetovo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 31.11.106.253

Export CSV

This IP address has been reported a total of 16 times from 13 distinct sources. 31.11.106.253 was first reported on September 27th 2026, and the most recent report was 2 weeks ago. In the last 60 days, the top reporter locations were: France with 4 reports; Netherlands with 4 reports; Germany with 2 reports. The most common categories in these recent reports were: Web App Attack 7 times; Port Scan 6 times; Bad Web Bot 2 times; Hacking 2 times; Email Spam 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 copestack	2026-09-29 01:30:19 (2 weeks ago)	Honeypot hit on ov-9acb4e (fail2ban jail: nginx-compat)	Web App Attack
🇫🇷 EvoX	2026-09-28 11:44:33 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 8899 [14] TCP	Port Scan
🇳🇱 donarev419	2026-09-28 09:59:43 (2 weeks ago)	Port scan detected on port 444 (connection without data transfer)	Port Scan
🇩🇪 kkeyser	2026-09-28 03:27:12 (2 weeks ago)	GET /cgi-bin/param.cgi HTTP/1.1	Web App Attack
Anonymous	2026-09-28 02:52:34 (2 weeks ago)	89/tcp (1 or more attempts)	Port Scan
🇺🇸 cwytech	2026-09-28 01:44:47 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tactical-rmm-lockdown-high.	Hacking
🇳🇱 0xffffffff	2026-09-28 01:06:38 (2 weeks ago)	[2026-09-28 04:06:36.461082] [authz_core:error] [pid 936761:tid 127979346716352] [client 31.11.106.2 ... show more [2026-09-28 04:06:36.461082] [authz_core:error] [pid 936761:tid 127979346716352] [client 31.11.106.253:52800] AH01630: client denied by server configuration: /var/www// , error_notes:wrong-host , URI:'/' [2026-09-28 04:06:36.632325] [authz_core:error] [pid 936762:tid 127980060395200] [client 31.11.106.253:52810] AH01630: client denied by server configuration: /var/www//cgi-bin , error_notes:non-dirs , URI:'/cgi-bin/param.cgi' [2026-09-28 04:06:36.632325] [authz_core:error] [pid 936762:tid 127980060395200] [client 31.11.106.253:52810] AH01630: client denied by server configuration: /var/www//cgi-bin , error_notes:non-dirs , URI:'/cgi-bin/param.cgi' [2026-09-28 04:06:37.009693] [authz_core:error] [pid 936761:tid 127980085573312] [client 31.11.106.253:52828] AH01630: client denied by server configuration: /var/www//favicon.ico , error_notes:wrong-host , URI:'/favicon.ico' [2026-09-28 04:06:37.009693] [authz_core:error] [pid 936761:tid 127980085573312] [client 31.11.106.253:52828] AH01630: client denied by se show less	Web App Attack Bad Web Bot
🇪🇸 Francisco Vallejo	2026-09-27 23:49:40 (2 weeks ago)	[Mon Sep 28 01:49:37.264509 2026] [core:info] [pid 1680229:tid 126351621220032] [client 31.11.106.25 ... show more [Mon Sep 28 01:49:37.264509 2026] [core:info] [pid 1680229:tid 126351621220032] [client 31.11.106.253:52386] AH00128: File does not exist: /var/www/franvallejo/cgi-bin/param.cgi [Mon Sep 28 01:49:38.603312 2026] [core:info] [pid 1680279:tid 126352191628992] [client 31.11.106.253:52412] AH00128: File does not exist: /var/www/franvallejo/image/lgbg.jpg [Mon Sep 28 01:49:39.199412 2026] [core:info] [pid 1680229:tid 126351084349120] [client 31.11.106.253:52416] AH00128: File does not exist: /var/www/franvallejo/login.rsp [Mon Sep 28 01:49:39.817172 2026] [core:info] [pid 1680279:tid 126351092741824] [client 31.11.106.253:52428] AH00128: File does not exist: /var/www/franvallejo/nobody/favicon.ico [Mon Sep 28 01:49:40.398399 2026] [core:info] [pid 1680229:tid 126352602674880] [client 31.11.106.253:52432] AH00128: File does not exist: /var/www/franvallejo/skin/default_1/images/logo.png ... show less	Brute-Force SSH
🇫🇷 a.mohamed.go	2026-09-27 22:31:55 (2 weeks ago)	31.11.106.253 - - [27/Sep/2026:22:31:55 +0000] "GET /cgi-bin/param.cgi HTTP/1.1" 404 153 "-" "Mozill ... show more 31.11.106.253 - - [27/Sep/2026:22:31:55 +0000] "GET /cgi-bin/param.cgi HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Version/4.0.1 Safari/530.18" ... show less	Hacking Web App Attack
🇳🇱 Maurice	2026-09-27 20:53:18 (2 weeks ago)	Honeypot hit: Empty payload (likely service probe); 37777 [15] TCP Reported by: https://github.com/s ... show more Honeypot hit: Empty payload (likely service probe); 37777 [15] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 EvoX	2026-09-27 19:13:38 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 8086 [10] TCP	Port Scan
Anonymous	2026-09-27 17:56:00 (2 weeks ago)	SIEM ALERT AUTO REPORT	Email Spam
Anonymous	2026-09-27 16:59:25 (2 weeks ago)	[Sun Sep 27 18:59:24.357958 2026] [access_compat:error] [pid 16807] [client 31.11.106.253:50716] AH0 ... show more [Sun Sep 27 18:59:24.357958 2026] [access_compat:error] [pid 16807] [client 31.11.106.253:50716] AH01797: client denied by server configuration: /var/www/html/ [Sun Sep 27 18:59:25.030762 2026] [access_compat:error] [pid 15782] [client 31.11.106.253:53580] AH01797: client denied by server configuration: /var/www/html/favicon.ico [Sun Sep 27 18:59:25.224362 2026] [access_compat:error] [pid 16267] [client 31.11.106.253:53594] AH01797: client denied by server configuration: /var/www/html/image ... show less	Web App Attack
🇫🇷 Mölkky	2026-09-27 16:13:03 (2 weeks ago)	Abusive IP (403 Forbidden)	Web App Attack
🇳🇱 0xffffffff	2026-09-27 15:37:10 (2 weeks ago)	[2026-09-27 18:37:07.899024] [authz_core:error] [pid 900112:tid 127979355076288] [client 31.11.106.2 ... show more [2026-09-27 18:37:07.899024] [authz_core:error] [pid 900112:tid 127979355076288] [client 31.11.106.253:52796] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/' [2026-09-27 18:37:08.107337] [authz_core:error] [pid 900112:tid 127979908732608] [client 31.11.106.253:52814] AH01630: client denied by server configuration: /var/www/html/cgi-bin , error_notes:wrong-host , URI:'/cgi-bin/param.cgi' [2026-09-27 18:37:08.339494] [authz_core:error] [pid 900112:tid 127979380254400] [client 31.11.106.253:52820] AH01630: client denied by server configuration: /var/www/html/favicon.ico , error_notes:wrong-host , URI:'/favicon.ico' [2026-09-27 18:37:08.564114] [authz_core:error] [pid 900112:tid 127979422217920] [client 31.11.106.253:52846] AH01630: client denied by server configuration: /var/www/html/image , error_notes:wrong-host , URI:'/image/lgbg.jpg' [2026-09-27 18:37:08.767592] [authz_core:error] [pid 864398:tid 127980035208896] [client 31.11.106.253:52850] AH01630: client d show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.219

🇮🇩 163.7.4.109

🇸🇬 101.32.240.31

🇬🇧 89.37.172.131

🇺🇸 54.214.192.102

🇬🇧 35.203.210.43

🇩🇪 213.209.159.231

🇹🇼 198.235.24.29

🇲🇽 189.203.163.10

🇺🇸 173.239.211.66

🇸🇬 139.59.230.98

🇨🇳 117.50.122.20

🇫🇷 62.192.140.30

🇹🇼 61.222.211.114

🇳🇱 109.160.32.166

🇹🇼 101.13.2.182

🇷🇺 77.35.31.9

🇺🇸 66.132.224.18

🇺🇸 43.135.135.212

🇫🇷 5.250.178.238