JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.220.76.230

31.220.76.230 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3655862.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.220.76.230

Whois 31.220.76.230

IP Abuse Reports for 31.220.76.230:

This IP address has been reported a total of 72 times from 32 distinct sources. 31.220.76.230 was first reported on October 15th 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 anycast_ac	2026-10-22 06:36:51 (9 minutes ago)	Blocked by UFW on legacypanel [3000/tcp] \| SPT: 38922 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on legacypanel [3000/tcp] \| SPT: 38922 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: FemboyHolding LTD show less	Port Scan
🇫🇷 Kejult	2026-10-22 03:21:40 (3 hours ago)	Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events a ... show more Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml. show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-10-22 01:43:11 (5 hours ago)	[2026-10-22 01:43:11] Attempted port scan on port 3000 by IP 31.220.76.230 (Reported by SysWarden ht ... show more [2026-10-22 01:43:11] Attempted port scan on port 3000 by IP 31.220.76.230 (Reported by SysWarden https://github.com/duggytuxy/syswarden) show less	Port Scan
🇬🇧 sonot	2026-10-21 22:46:20 (7 hours ago)	Blocked by UFW on tunneluk01 [3000/tcp] \| SPT: 34334 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [3000/tcp] \| SPT: 34334 \| TTL: 52 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 zulzeen	2026-10-21 17:13:28 (13 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (Infra/DevOps Attack)	Hacking Web App Attack
Anonymous	2026-10-21 14:50:12 (15 hours ago)	Blocked by firewall on hugin [3000/tcp] \| Rule: UFW \| SPT: 60116 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [3000/tcp] \| Rule: UFW \| SPT: 60116 \| TTL: 57 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sandra361	2026-10-21 14:27:32 (16 hours ago)	Port scan detected: 37 attempts across 1 port (3000). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=31. ... show more Port scan detected: 37 attempts across 1 port (3000). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=31.220.76.230 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=37615 DF PROTO=TCP SPT=45720 DPT=3000 WINDOW=64240 RES=0x00 ACK FIN URGP=0 show less	Port Scan
Anonymous	2026-10-21 13:42:16 (17 hours ago)	2026-10-21T15:42:15.804609+02:00 vps kernel: [8960903.251847] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-21T15:42:15.804609+02:00 vps kernel: [8960903.251847] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=31.220.76.230 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=36667 DF PROTO=TCP SPT=55158 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 AmStaff	2026-10-21 08:54:31 (21 hours ago)	Honeypot: web exploitation attempts. Targeted ports: 3000.	Web App Attack
🇩🇪 ValtonTahiri	2026-10-21 06:47:02 (23 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=31.220.76.230; proto=TCP; source_port=38536; target_port=3000 show less	Port Scan
🇫🇷 fzc2000	2026-10-21 05:26:45 (1 day ago)	Repeated TCP connections to unused ports on a honeypot	Port Scan
🇫🇮 sonot	2026-10-21 04:35:04 (1 day ago)	Blocked by UFW on mail [3000/tcp] \| SPT: 45596 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on mail [3000/tcp] \| SPT: 45596 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Zikmadol	2026-10-21 03:14:58 (1 day ago)	Trapline honeypot: MCP server abuse. Feed: https://github.com/Zikmadol/trapline-ioc	Web App Attack
🇺🇸 COMPLEX	2026-10-21 02:35:45 (1 day ago)	Unsolicited TCP traffic \| Action: DROP \| Port 3000	Brute-Force
🇫🇷 Kejult	2026-10-21 00:25:54 (1 day ago)	Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events a ... show more Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml. show less	Port Scan

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880::1f

🇬🇧 200.138.46.233

🇩🇪 167.94.146.43

🇺🇸 165.154.36.71

🇬🇧 154.16.44.175

🇭🇺 146.70.120.38

🇺🇸 143.42.1.34

🇹🇼 111.70.23.238

🇮🇳 106.51.92.114

🇺🇸 104.22.20.221

🇫🇷 85.217.140.46

🇫🇷 85.217.140.43

🇧🇪 34.156.188.158

🇺🇸 34.71.197.180

🇸🇦 2.91.110.37

🇬🇧 193.32.209.226

🇧🇷 179.176.210.17

🇵🇰 175.107.215.105

🇳🇱 152.42.128.119

🇮🇷 151.234.36.13