JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.220.94.92

Neutral Activity

Abuse confidence score ?

0% Low Risk

74 reports

43 reporters · latest 9 months ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmd193465.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

31.220.94.92 has been reported 74 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 31.220.94.92

This IP address has been reported a total of 74 times from 43 distinct sources. 31.220.94.92 was first reported on December 2nd 2025, and the most recent report was 9 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2025-12-04 16:55:56 (9 months ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇮🇹 LTM	2025-12-03 07:20:01 (9 months ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
Anonymous	2025-12-03 04:31:00 (9 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇨🇿 Countryman	2025-12-03 02:53:37 (9 months ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇹🇭 MWA SOC	2025-12-03 02:51:30 (9 months ago)		Hacking
🇺🇸 bigscoots.com	2025-12-03 02:40:45 (9 months ago)	(sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 2 20:40:28 16569 sshd[28038]: Invalid user admin from 31.220.94.92 port 51376 Dec 2 20:40:29 16569 sshd[28038]: Failed password for invalid user admin from 31.220.94.92 port 51376 ssh2 Dec 2 20:40:31 16569 sshd[28040]: Invalid user orangepi from 31.220.94.92 port 49430 Dec 2 20:40:33 16569 sshd[28040]: Failed password for invalid user orangepi from 31.220.94.92 port 49430 ssh2 Dec 2 20:40:34 16569 sshd[28042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.94.92 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-03 02:14:07 (9 months ago)	(sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 2 20:13:55 14429 sshd[8202]: Invalid user admin from 31.220.94.92 port 52040 Dec 2 20:13:57 14429 sshd[8202]: Failed password for invalid user admin from 31.220.94.92 port 52040 ssh2 Dec 2 20:13:58 14429 sshd[8204]: Invalid user orangepi from 31.220.94.92 port 52044 Dec 2 20:14:01 14429 sshd[8204]: Failed password for invalid user orangepi from 31.220.94.92 port 52044 ssh2 Dec 2 20:14:02 14429 sshd[8262]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.94.92 user=root show less	Brute-Force SSH
🇦🇹 webnestify	2025-12-03 02:04:05 (9 months ago)	[Webnestify Honeypot - Europe] Unauthorized connection attempt on port 2222.	Port Scan Hacking Brute-Force
Anonymous	2025-12-03 01:46:38 (9 months ago)	Port Scanner	Port Scan
🇩🇪 Alejandro Docasar	2025-12-03 01:39:59 (9 months ago)		Web App Attack
🇺🇸 bigscoots.com	2025-12-03 01:32:27 (9 months ago)	(sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 2 19:32:03 15729 sshd[16008]: Invalid user admin from 31.220.94.92 port 48952 Dec 2 19:32:05 15729 sshd[16008]: Failed password for invalid user admin from 31.220.94.92 port 48952 ssh2 Dec 2 19:32:06 15729 sshd[16011]: Invalid user orangepi from 31.220.94.92 port 48966 Dec 2 19:32:08 15729 sshd[16011]: Failed password for invalid user orangepi from 31.220.94.92 port 48966 ssh2 Dec 2 19:32:09 15729 sshd[16013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.94.92 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-03 01:10:02 (9 months ago)	(sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 31.220.94.92 (GB/United Kingdom/vmi2947944.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Dec 2 19:09:53 16030 sshd[4558]: Invalid user admin from 31.220.94.92 port 53640 Dec 2 19:09:55 16030 sshd[4558]: Failed password for invalid user admin from 31.220.94.92 port 53640 ssh2 Dec 2 19:09:56 16030 sshd[4560]: Invalid user orangepi from 31.220.94.92 port 53654 Dec 2 19:09:58 16030 sshd[4560]: Failed password for invalid user orangepi from 31.220.94.92 port 53654 ssh2 Dec 2 19:09:59 16030 sshd[4562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.220.94.92 user=root show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-12-03 00:53:33 (9 months ago)	(mod_security) mod_security (id:218420) triggered by 31.220.94.92 (vmi2947944.contaboserver.net): 1 ... show more (mod_security) mod_security (id:218420) triggered by 31.220.94.92 (vmi2947944.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 19:53:30.320337 2025] [security2:error] [pid 19588:tid 19588] [client 31.220.94.92:59232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.61:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.61"] [uri "/hello.world"] [unique_id "aS-KCq2hBfBoThC6-4TR1QAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 [email protected]	2025-12-03 00:48:56 (9 months ago)	...	Brute-Force SSH
🇫🇷 ingroscart.it	2025-12-03 00:48:35 (9 months ago)	(mod_security) mod_security triggered on hostname [redacted] 31.220.94.92 (FR/France/vmi2947944.cont ... show more (mod_security) mod_security triggered on hostname [redacted] 31.220.94.92 (FR/France/vmi2947944.contaboserver.net) show less	SQL Injection

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 203.18.158.143

🇧🇷 190.115.84.25

🇳🇱 185.136.15.19

🇩🇿 105.96.109.45

🇸🇬 101.47.159.50

🇮🇷 85.198.19.239

🇺🇸 66.132.172.125

🇨🇦 45.194.92.100

🇺🇸 45.61.187.220

🇮🇳 203.145.165.2

🇷🇺 178.34.122.25

🇫🇮 193.187.110.214

🇨🇮 102.210.18.150

🇫🇷 91.231.89.83

🇨🇿 77.75.76.171

🇺🇸 64.62.197.30

🇺🇦 37.73.48.70

🇭🇰 20.24.194.29

🇳🇱 2a01:4020:2:b:101::16

🇫🇷 2001:41d0:304:300::3de9