JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.11.92.249

Neutral Activity

Abuse confidence score ?

0% Low Risk

89 reports

53 reporters · latest 4 months ago

ISP	PPPoE Broadband Internet
Usage Type	Fixed Line ISP
ASN	AS16333
Domain Name	a1.mk
Country	🇲🇰 North Macedonia
City	Skopje, Grad Skopje

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

31.11.92.249 has been reported 89 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 31.11.92.249

Export CSV

This IP address has been reported a total of 89 times from 53 distinct sources. 31.11.92.249 was first reported on May 25th 2026, and the most recent report was 4 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Andreas Kempe	2026-05-30 06:19:07 (4 months ago)	sshd - Fail2ban banned at 2026-05-30T06:02:34.528Z	Brute-Force SSH
🇩🇪 Andreas Kempe	2026-05-27 06:04:19 (4 months ago)	sshd - Fail2ban banned at 2026-05-27T06:01:28.203Z	Brute-Force SSH
🇩🇪 Andreas Kempe	2026-05-26 06:03:32 (4 months ago)	sshd - Fail2ban banned at 2026-05-26T06:01:16.215Z	Brute-Force SSH
🇺🇸 seraph.ws	2026-05-26 02:30:53 (4 months ago)	2026-05-26T02:28:32.744556+00:00 seraph sshd[1141832]: Failed password for invalid user root from 31 ... show more 2026-05-26T02:28:32.744556+00:00 seraph sshd[1141832]: Failed password for invalid user root from 31.11.92.249 port 2320 ssh2 2026-05-26T02:29:40.304888+00:00 seraph sshd[1142362]: User root from 31.11.92.249 not allowed because not listed in AllowUsers 2026-05-26T02:29:40.426817+00:00 seraph sshd[1142362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.11.92.249 user=root 2026-05-26T02:29:42.788230+00:00 seraph sshd[1142362]: Failed password for invalid user root from 31.11.92.249 port 53774 ssh2 2026-05-26T02:30:52.891233+00:00 seraph sshd[1142927]: Invalid user arkserver from 31.11.92.249 port 60343 ... show less	SSH
🇵🇹 WebTejo	2026-05-26 02:29:53 (4 months ago)	Detected multiple authentication failures and invalid user attempts from IP address 31.11.92.249 on ... show more Detected multiple authentication failures and invalid user attempts from IP address 31.11.92.249 on [PT] Otter Node. show less	Brute-Force SSH
Anonymous	2026-05-26 02:29:48 (4 months ago)	2026-05-26T04:16:36.783618+02:00 smvps001 sshd-session[160777]: Disconnected from authenticating use ... show more 2026-05-26T04:16:36.783618+02:00 smvps001 sshd-session[160777]: Disconnected from authenticating user root 31.11.92.249 port 37828 [preauth] 2026-05-26T04:28:36.920796+02:00 smvps001 sshd-session[161472]: Disconnected from authenticating user root 31.11.92.249 port 55206 [preauth] 2026-05-26T04:29:46.810027+02:00 smvps001 sshd-session[161513]: Disconnected from authenticating user root 31.11.92.249 port 7828 [preauth] ... show less	Brute-Force SSH
🇩🇪 harikalarkutusu	2026-05-26 01:38:29 (4 months ago)	(sshd) Failed SSH login from 31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk): 5 ... show more (sshd) Failed SSH login from 31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: May 26 03:19:07 localhost sshd[147220]: Invalid user student from 31.11.92.249 port 1707 May 26 03:35:03 localhost sshd[147752]: Invalid user rustserver from 31.11.92.249 port 25411 May 26 03:36:09 localhost sshd[147792]: Invalid user ryan from 31.11.92.249 port 29889 May 26 03:37:18 localhost sshd[147831]: Invalid user cloud from 31.11.92.249 port 36351 May 26 03:38:26 localhost sshd[147862]: Invalid user patrick from 31.11.92.249 port 45181 show less	FTP Brute-Force Port Scan Brute-Force Web App Attack SSH
🇺🇸 bigscoots.com	2026-05-26 00:40:32 (4 months ago)	(sshd) Failed SSH login from 31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk): 5 ... show more (sshd) Failed SSH login from 31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 25 19:30:38 15623 sshd[15106]: Invalid user satis from 31.11.92.249 port 46831 May 25 19:30:40 15623 sshd[15106]: Failed password for invalid user satis from 31.11.92.249 port 46831 ssh2 May 25 19:39:15 15623 sshd[16213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.11.92.249 user=root May 25 19:39:16 15623 sshd[16213]: Failed password for root from 31.11.92.249 port 53467 ssh2 May 25 19:40:29 15623 sshd[16332]: Invalid user dani from 31.11.92.249 port 59904 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-25 23:44:43 (4 months ago)	31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk), 5 distributed sshd attacks on a ... show more 31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 25 18:44:33 15015 sshd[919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.11.92.249 user=root May 25 18:30:22 15015 sshd[31638]: Failed password for root from 103.171.84.46 port 34528 ssh2 May 25 18:30:02 15015 sshd[31636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.102.115.85 user=root May 25 18:30:04 15015 sshd[31636]: Failed password for root from 185.102.115.85 port 46774 ssh2 May 25 18:30:20 15015 sshd[31638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.171.84.46 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-25 22:26:05 (4 months ago)	31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk), 5 distributed sshd attacks on a ... show more 31.11.92.249 (MK/North Macedonia/ctel-31-11-92-249.cabletel.com.mk), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 25 17:25:47 18113 sshd[20634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.11.92.249 user=root May 25 17:25:49 18113 sshd[20634]: Failed password for root from 31.11.92.249 port 54873 ssh2 May 25 17:25:22 18113 sshd[20580]: Failed password for root from 141.147.174.71 port 44200 ssh2 May 25 17:24:26 18113 sshd[20426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.32.248.94 user=root May 25 17:25:20 18113 sshd[20580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.147.174.71 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇨🇳 Sakura Miko	2026-05-25 21:57:44 (4 months ago)	2026-05-26T05:57:39.310227+08:00 nekoaru-shanghai-1 sshd-session[735013]: Connection from 31.11.92.2 ... show more 2026-05-26T05:57:39.310227+08:00 nekoaru-shanghai-1 sshd-session[735013]: Connection from 31.11.92.249 port 47729 on 192.168.12.24 port 41022 rdomain "" 2026-05-26T05:57:40.941114+08:00 nekoaru-shanghai-1 sshd-session[735013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.11.92.249 user=root 2026-05-26T05:57:43.321819+08:00 nekoaru-shanghai-1 sshd-session[735013]: Failed password for root from 31.11.92.249 port 47729 ssh2 ... show less	Brute-Force SSH
🇫🇷 -SK-	2026-05-25 21:57:30 (4 months ago)	DUS - (f2b sshd massive attemts)	Brute-Force SSH
🇳🇱 stom	2026-05-25 21:55:53 (4 months ago)	2026-05-25T21:55:51.612125 socky.stom66.co.uk proftpd[1901029]: session[1901029] 0.0.0.0 (31.11.92.2 ... show more 2026-05-25T21:55:51.612125 socky.stom66.co.uk proftpd[1901029]: session[1901029] 0.0.0.0 (31.11.92.249[31.11.92.249]): USER curl: no such user found from 31.11.92.249 [31.11.92.249] to ::ffff:5.79.80.26:2222 ... show less	Brute-Force FTP Brute-Force
🇺🇸 lashworth	2026-05-25 21:51:19 (4 months ago)	Multiple failed SSH login attempts (user: curl) from SUSE server	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-25 21:20:48 (4 months ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.110

🇲🇽 187.212.59.26

🇺🇸 147.185.132.170

🇳🇱 146.19.248.35

🇸🇬 101.47.15.119

🇫🇷 31.36.2.138

🇷🇴 2.57.121.112

🇨🇱 201.221.214.33

🇧🇷 177.202.132.4

🇺🇸 143.42.164.182

🇭🇰 107.150.123.48

🇹🇼 101.13.5.50

🇺🇸 100.27.199.17

🇨🇦 85.217.149.73

🇮🇳 121.242.232.147

🇷🇺 109.184.132.140

🇫🇷 88.166.73.197

🇬🇧 86.190.115.54

🇳🇱 77.91.71.91

🇱🇹 62.60.134.212