31.59.160.3

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
1,628 reports
626 reporters ยท latest 5 hours ago
ISP
ServerExpress
Usage Type
Data Center/Web Hosting/Transit
ASN
AS203861
Hostname(s)
hosted-by.server.express
Domain Name
miteflux.co.uk
Country
๐Ÿ‡ธ๐Ÿ‡ช Sweden
City
Stockholm, Stockholm
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
1,628 from 626 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 256 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 253 ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 190
Most common categories Web App Attack 898 Bad Web Bot 408 Brute-Force 379 Hacking 230 Port Scan 133
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท abuseipdb.amaze321
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack Bad Web Bot
๐Ÿ‡ณ๐Ÿ‡ฑ Alt255
Bad Web Bot Web App Attack
๐Ÿ‡ช๐Ÿ‡ธ Serpes
Suspicious activity detected
Web App Attack DDoS Attack Hacking
๐Ÿ‡ณ๐Ÿ‡ฑ Alt255
Bad Web Bot Web App Attack
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
๐Ÿ‡บ๐Ÿ‡ธ solantex
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Brute-Force Hacking
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
๐Ÿ‡ซ๐Ÿ‡ฎ โ˜ |ส‚ษงฤ…ษ–ฦกแฟณ|โ˜ 
[2026-10-23 06:25:15 UTC] Vulnerability/exploit scanning detected from 31.59.160.3 (hosted-by.server.express) PATHS: unknown
Bad Web Bot Web App Attack
Anonymous
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ [email protected]
Fail2Ban jail apache-json-scanners detected activity on 2026-10-21T10:15:06Z
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ [email protected]
Fail2Ban jail apache-json-scanners detected activity on 2026-10-21T07:09:01Z
Brute-Force
๐Ÿ‡จ๐Ÿ‡ญ TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
๐Ÿ‡ซ๐Ÿ‡ฎ โ˜ |ส‚ษงฤ…ษ–ฦกแฟณ|โ˜ 
[2026-10-21 06:47:50 UTC] Vulnerability/exploit scanning detected from 31.59.160.3 (hosted-by.server.express) PATHS: unknown
Bad Web Bot Web App Attack
๐Ÿ‡ฎ๐Ÿ‡ฉ David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
๐Ÿ‡บ๐Ÿ‡ธ solantex
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Brute-Force Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ต๐Ÿ‡ฐ 182.188.24.243
๐Ÿ‡จ๐Ÿ‡ฑ 179.56.110.243
๐Ÿ‡จ๐Ÿ‡ณ 111.79.98.197
๐Ÿ‡ฉ๐Ÿ‡ช 34.185.152.112
๐Ÿ‡ต๐Ÿ‡ฑ 194.180.48.241
๐Ÿ‡ต๐Ÿ‡ช 190.119.63.98
๐Ÿ‡จ๐Ÿ‡ด 186.33.52.222
๐Ÿ‡จ๐Ÿ‡ญ 179.43.153.18
๐Ÿ‡ญ๐Ÿ‡บ 178.48.181.3
๐Ÿ‡ธ๐Ÿ‡ฌ 128.199.209.169
๐Ÿ‡จ๐Ÿ‡ณ 115.190.240.193
๐Ÿ‡ฉ๐Ÿ‡ช 109.91.4.177
๐Ÿ‡ณ๐Ÿ‡ฌ 102.88.137.80
๐Ÿ‡ธ๐Ÿ‡ฆ 93.112.210.60
๐Ÿ‡ซ๐Ÿ‡ท 91.231.89.93
๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.38
๐Ÿ‡บ๐Ÿ‡ธ 75.90.87.244
๐Ÿ‡บ๐Ÿ‡ธ 66.27.173.108
๐Ÿ‡บ๐Ÿ‡ธ 63.135.161.12
๐Ÿ‡บ๐Ÿ‡ธ 45.132.187.161