AbuseIPDB » 31.76.5.11
31.76.5.11
This IP was reported 7 times. Confidence of
Abuse
is 28% : ?
ISP
SERV.HOST GROUP LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS207957
Domain Name
serv.host
Country
🇳🇴
Norway
City
Oslo, Oslo
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 31.76.5.11 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
31.76.5.11 was first reported on
July 31st 2026 , and the most recent report was
3 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
3 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Little Iguana
2026-08-01 17:29:50
(3 weeks ago)
trying to access non-authorized port
Port Scan
🇩🇪
ValtonTahiri
2026-08-01 10:01:51
(3 weeks ago)
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show more
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=31.76.5.11; proto=TCP; source_port=443; target_port=62886; flags=ACK,SYN
show less
Port Scan
🇺🇸
anon333
2026-08-01 07:34:13
(3 weeks ago)
Hacker syslog review 1785569653
Hacking
🇺🇸
rellim.com
2026-08-01 05:06:16
(3 weeks ago)
Jul 31 16:46:39 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08 ...
show more
Jul 31 16:46:39 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=31.76.5.11 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=443 DPT=18890 WINDOW=65160 RES=0x00 ACK SYN URGP=0
Jul 31 20:07:30 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=31.76.5.11 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=443 DPT=35582 WINDOW=65160 RES=0x00 ACK SYN URGP=0
Jul 31 22:06:15 alice kernel: HACK IN=enp3s0 OUT=enp1s0f1 MAC=68:05:ca:2e:ce:bc:00:24:dc:78:a0:01:08:00 SRC=31.76.5.11 DST=204.17.205.254 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=0 DF PROTO=TCP SPT=443 DPT=32072 WINDOW=65160 RES=0x00 ACK SYN URGP=0
...
show less
Port Scan
🇺🇸
cwytech
2026-07-31 21:31:57
(3 weeks ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
Hacking
🇬🇧
Andrew
2026-07-31 18:46:01
(3 weeks ago)
Blocked by UFW (TCP on port 65295).
Source port: 443
TTL: 56
Packet length: 60
TOS: 0x00
This repor ...
show more
Blocked by UFW (TCP on port 65295).
Source port: 443
TTL: 56
Packet length: 60
TOS: 0x00
This report (for 31.76.5.11) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇯🇵
jay hung
2026-07-31 14:37:48
(3 weeks ago)
2026-07-31T14:37:47.328019+00:00 quarktech kernel: [266842.754954] [UFW BLOCK] IN=eth0 OUT= MAC=22:0 ...
show more
2026-07-31T14:37:47.328019+00:00 quarktech kernel: [266842.754954] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=31.76.5.11 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x40 TTL=42 ID=0 DF PROTO=TCP SPT=443 DPT=37938 WINDOW=0 RES=0x00 RST URGP=0
...
show less
Port Scan
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: