JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.220.76.89

31.220.76.89 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 16%: ?

16%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3129938.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.220.76.89

Whois 31.220.76.89

IP Abuse Reports for 31.220.76.89:

This IP address has been reported a total of 35 times from 7 distinct sources. 31.220.76.89 was first reported on April 1st 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Burayot	2026-09-01 02:16:59 (13 hours ago)	LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 31.220.76.89 (FR/France/vmi3129938 ... show more LF_MODSEC: (mod_security) mod_security (id:10000003) triggered by 31.220.76.89 (FR/France/vmi3129938.contaboserver.net): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 kosada.com	2026-07-28 05:50:15 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-06 19:58:50 (1 month ago)	(mod_security) mod_security (id:217210) triggered by 31.220.76.89 (vmi3129938.contaboserver.net): 1 ... show more (mod_security) mod_security (id:217210) triggered by 31.220.76.89 (vmi3129938.contaboserver.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:58:42.169207 2026] [security2:error] [pid 885:tid 885] [client 31.220.76.89:42128] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|jr2g.com\|F\|4"] [data "GET ?C=S;O=A HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jr2g.com"] [uri "/"] [unique_id "akwI8rxOqhPg3jDnw-bX_gAAAAA"], referer: https://jr2g.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Short-legs-Spider	2026-05-20 20:43:00 (3 months ago)	Disregard of robots.txt -- [21/May/2026:05:43:00 +0900] "GET /==s.gif HTTP/1.1" 403 76 "-" "Mozill ... show more Disregard of robots.txt -- [21/May/2026:05:43:00 +0900] "GET /==s.gif HTTP/1.1" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇷🇺 DZBOT	2026-05-16 13:40:58 (3 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇳🇱 Roderic	2026-05-16 13:37:38 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 ISPLtd	2024-04-25 02:02:20 (2 years ago)	Apr 24 23:02:16 SRC=31.220.76.89 PROTO=TCP SPT=37930 DPT=44664 SYN Apr 24 23:02:17 SRC=31.220.76.89 ... show more Apr 24 23:02:16 SRC=31.220.76.89 PROTO=TCP SPT=37930 DPT=44664 SYN Apr 24 23:02:17 SRC=31.220.76.89 PROTO=TCP SPT=37930 DPT=44664 SYN Apr 24 23:02:19 SRC=31.220.76.89 PROTO=TCP SPT=37930 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-23 17:11:26 (2 years ago)	Apr 23 14:11:22 SRC=31.220.76.89 PROTO=TCP SPT=46800 DPT=44664 SYN Apr 23 14:11:23 SRC=31.220.76.89 ... show more Apr 23 14:11:22 SRC=31.220.76.89 PROTO=TCP SPT=46800 DPT=44664 SYN Apr 23 14:11:23 SRC=31.220.76.89 PROTO=TCP SPT=46800 DPT=44664 SYN Apr 23 14:11:25 SRC=31.220.76.89 PROTO=TCP SPT=46800 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-22 00:36:15 (2 years ago)	Apr 21 21:36:10 SRC=31.220.76.89 PROTO=TCP SPT=35032 DPT=44664 SYN Apr 21 21:36:11 SRC=31.220.76.89 ... show more Apr 21 21:36:10 SRC=31.220.76.89 PROTO=TCP SPT=35032 DPT=44664 SYN Apr 21 21:36:11 SRC=31.220.76.89 PROTO=TCP SPT=35032 DPT=44664 SYN Apr 21 21:36:13 SRC=31.220.76.89 PROTO=TCP SPT=35032 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-20 23:18:13 (2 years ago)	Apr 20 20:18:09 SRC=31.220.76.89 PROTO=TCP SPT=57380 DPT=44664 SYN Apr 20 20:18:10 SRC=31.220.76.89 ... show more Apr 20 20:18:09 SRC=31.220.76.89 PROTO=TCP SPT=57380 DPT=44664 SYN Apr 20 20:18:10 SRC=31.220.76.89 PROTO=TCP SPT=57380 DPT=44664 SYN Apr 20 20:18:12 SRC=31.220.76.89 PROTO=TCP SPT=57380 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-20 07:12:29 (2 years ago)	Apr 20 04:12:25 SRC=31.220.76.89 PROTO=TCP SPT=53740 DPT=9981 SYN Apr 20 04:12:26 SRC=31.220.76.89 P ... show more Apr 20 04:12:25 SRC=31.220.76.89 PROTO=TCP SPT=53740 DPT=9981 SYN Apr 20 04:12:26 SRC=31.220.76.89 PROTO=TCP SPT=53740 DPT=9981 SYN Apr 20 04:12:28 SRC=31.220.76.89 PROTO=TCP SPT=53740 DPT=9981 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-19 07:52:06 (2 years ago)	Apr 19 04:52:01 SRC=31.220.76.89 PROTO=TCP SPT=56680 DPT=44664 SYN Apr 19 04:52:02 SRC=31.220.76.89 ... show more Apr 19 04:52:01 SRC=31.220.76.89 PROTO=TCP SPT=56680 DPT=44664 SYN Apr 19 04:52:02 SRC=31.220.76.89 PROTO=TCP SPT=56680 DPT=44664 SYN Apr 19 04:52:04 SRC=31.220.76.89 PROTO=TCP SPT=56680 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-18 10:23:36 (2 years ago)	Apr 18 07:23:32 SRC=31.220.76.89 PROTO=TCP SPT=58844 DPT=44664 SYN Apr 18 07:23:33 SRC=31.220.76.89 ... show more Apr 18 07:23:32 SRC=31.220.76.89 PROTO=TCP SPT=58844 DPT=44664 SYN Apr 18 07:23:33 SRC=31.220.76.89 PROTO=TCP SPT=58844 DPT=44664 SYN Apr 18 07:23:35 SRC=31.220.76.89 PROTO=TCP SPT=58844 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-17 17:21:16 (2 years ago)	Apr 17 14:21:12 SRC=31.220.76.89 PROTO=TCP SPT=47580 DPT=44664 SYN Apr 17 14:21:13 SRC=31.220.76.89 ... show more Apr 17 14:21:12 SRC=31.220.76.89 PROTO=TCP SPT=47580 DPT=44664 SYN Apr 17 14:21:13 SRC=31.220.76.89 PROTO=TCP SPT=47580 DPT=44664 SYN Apr 17 14:21:15 SRC=31.220.76.89 PROTO=TCP SPT=47580 DPT=44664 ... show less	Port Scan
🇩🇪 ISPLtd	2024-04-17 00:41:57 (2 years ago)	Apr 16 21:41:52 SRC=31.220.76.89 PROTO=TCP SPT=38656 DPT=44664 SYN Apr 16 21:41:53 SRC=31.220.76.89 ... show more Apr 16 21:41:52 SRC=31.220.76.89 PROTO=TCP SPT=38656 DPT=44664 SYN Apr 16 21:41:53 SRC=31.220.76.89 PROTO=TCP SPT=38656 DPT=44664 SYN Apr 16 21:41:55 SRC=31.220.76.89 PROTO=TCP SPT=38656 DPT=44664 ... show less	Port Scan

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 217.113.224.155

🇻🇪 217.76.251.160

🇷🇺 213.165.60.123

🇹🇳 197.14.54.201

🇦🇷 181.23.41.237

🇧🇷 177.36.62.238

🇲🇽 104.28.225.189

🇺🇸 68.183.58.201

🇳🇱 45.142.193.196

🇺🇸 2602:80d:1007::ce

🇺🇦 213.59.165.127

🇧🇩 203.76.223.173

🇳🇱 195.178.110.137

🇸🇮 185.57.146.19

🇺🇸 167.71.117.7

🇬🇧 154.16.44.248

🇿🇦 102.32.195.31

🇮🇪 86.40.58.211

🇺🇸 84.32.32.40

🇭🇷 77.237.123.95