JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.220.89.136

Neutral Activity

Abuse Confidence Score

0% Low Risk

37 reports

31 reporters · latest 5 months ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi3554462.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

31.220.89.136 has been reported 37 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

37 from 31 distinct reporters

First reported

April 30th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 D3monite	2026-05-21 08:53:04 UTC · (5 months ago)	Attempted Brute Force (whostmgrd)	Brute-Force
🇪🇸 masterguru	2026-05-21 03:17:59 UTC · (5 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (DE/Germany/vmi1241178.contaboserver.net): 5 in the last 3600 secs (0-123)	Hacking
Anonymous	2026-05-20 05:02:36 UTC · (5 months ago)	31.220.89.136 (FR/France/vmi1241178.contaboserver.net), 5 distributed cpanel attacks on account [root] in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-19 23:02:34 -0600] info [whostmgrd] 31.220.89.136 - root " ... show more 31.220.89.136 (FR/France/vmi1241178.contaboserver.net), 5 distributed cpanel attacks on account [root] in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-19 23:02:34 -0600] info [whostmgrd] 31.220.89.136 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-19 23:02:35 -0600] info [whostmgrd] 31.220.89.136 - root "GET /cpsess4367481426/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-19 23:02:26 -0600] info [whostmgrd] 34.228.225.76 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-19 23:02:27 -0600] info [whostmgrd] 34.228.225.76 - root "GET /cpsess4607234803/json-api/loadavg?api.version=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-19 23:02:27 -0600] info [whostmgrd] 34.228.225.76 - root "GET /cpsess4607234803/execute/loadavg HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect IP Addresses Blocked: show less	Port Scan
Anonymous	2026-05-19 07:23:27 UTC · (5 months ago)	Blocked by ModSec and CSF	Port Scan
🇳🇱 Erik	2026-05-19 06:31:19 UTC · (5 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (FR/France/Bas-Rhin/Lauterbourg/vmi1241178.contaboserver.net): 2 in the last 3600 secs	Web App Attack
🇷🇴 gtheo99	2026-05-19 02:59:25 UTC · (5 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (DE/Germany/vmi1241178.contaboserver.net): 2 in the last 900 secs	Brute-Force Web App Attack
🇪🇸 masterguru	2026-05-18 09:58:29 UTC · (5 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (DE/Germany/vmi1241178.contaboserver.net): 5 in the last 3600 secs (0-122)	Hacking
🇧🇷 hostseries	2026-05-18 09:40:43 UTC · (5 months ago)	Trigger: LF_CPANEL	Brute-Force
🇬🇧 Aetherweb Ark	2026-05-14 14:34:20 UTC · (5 months ago)	Port Scan detected from 31.220.89.136 (FR/France/vmi1241178.contaboserver.net). N in the last X seconds	Port Scan
Anonymous	2026-05-14 12:36:17 UTC · (5 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (FR/France/vmi1241178.contaboserver.net): 5 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [2026-05-14 06:36:09 -0600] info [whostmgrd] 31.220.89.136 - root "POST /login/?l ... show more (cpanel) Failed cPanel login from 31.220.89.136 (FR/France/vmi1241178.contaboserver.net): 5 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [2026-05-14 06:36:09 -0600] info [whostmgrd] 31.220.89.136 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 06:36:11 -0600] info [whostmgrd] 31.220.89.136 - root "GET /cpsess6426795128/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 06:36:12 -0600] info [whostmgrd] 31.220.89.136 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 06:36:14 -0600] info [whostmgrd] 31.220.89.136 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 06:36:14 -0600] info [whostmgrd] 31.220.89.136 - root "GET /cpsess6333468271/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect show less	Port Scan
🇫🇷 Dorian GRANDHAY	2026-05-14 02:03:08 UTC · (6 months ago)	31.220.89.136 (FR/France/vmi1241178.contaboserver.net), 5 distributed cpanel attacks on account [root] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-14 04:02:55 +0200] info [whostmgrd] 31.220.89.136 - root ... show more 31.220.89.136 (FR/France/vmi1241178.contaboserver.net), 5 distributed cpanel attacks on account [root] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: [2026-05-14 04:02:55 +0200] info [whostmgrd] 31.220.89.136 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 03:51:43 +0200] info [whostmgrd] 104.45.133.12 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 03:51:44 +0200] info [whostmgrd] 104.45.133.12 - root "GET /cpsess3006627225/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 03:58:49 +0200] info [whostmgrd] 104.45.133.12 - root "POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-14 03:58:51 +0200] info [whostmgrd] 104.45.133.12 - root "GET /cpsess6560624701/json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect IP Addresses Blocked: show less	Port Scan
Anonymous	2026-05-09 01:32:42 UTC · (6 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (FR/France/vmi1241178.contaboserver.net): 5 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [2026-05-08 19:32:39 -0600] info [whostmgrd] 31.220.89.136 - root "GET /json-api/ ... show more (cpanel) Failed cPanel login from 31.220.89.136 (FR/France/vmi1241178.contaboserver.net): 5 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: [2026-05-08 19:32:39 -0600] info [whostmgrd] 31.220.89.136 - root "GET /json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-08 19:32:39 -0600] info [whostmgrd] 31.220.89.136 - root "GET /json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-08 19:32:40 -0600] info [whostmgrd] 31.220.89.136 - root "GET /json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-08 19:32:40 -0600] info [whostmgrd] 31.220.89.136 - root "GET /json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect [2026-05-08 19:32:41 -0600] info [whostmgrd] 31.220.89.136 - root "GET /json-api/version HTTP/1.1" FAILED LOGIN whostmgrd: user password incorrect show less	Port Scan
🇪🇸 masterguru	2026-05-09 01:26:57 UTC · (6 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (DE/Germany/vmi1241178.contaboserver.net): 5 in the last 3600 secs (0-123)	Hacking
🇩🇪 Trapper67	2026-05-08 23:29:39 UTC · (6 months ago)	(cpanel) Failed cPanel login from 31.220.89.136 (vmi1241178.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs:	Port Scan
🇲🇾 Rizzy	2026-05-08 23:23:23 UTC · (6 months ago)	Multiple failed cPanel logins	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.174.31.158

🇮🇳 218.248.19.102

🇺🇸 205.210.31.84

🇻🇪 200.8.210.196

🇳🇱 195.178.110.31

🇲🇽 187.159.248.230

🇳🇱 176.65.148.183

🇺🇸 162.216.149.88

🇮🇳 143.110.240.79

🇮🇳 122.160.221.219

🇳🇱 109.160.32.115

🇧🇩 103.121.39.113

🇿🇦 102.130.113.9

🇺🇸 91.90.83.243

🇳🇱 81.19.216.125

🇺🇸 66.132.172.195

🇸🇬 43.159.39.203

🇧🇪 35.210.232.10

🇨🇴 186.31.126.92

🇧🇷 170.246.12.20