JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.237.230.31

Recent Activity

Abuse confidence score ?

36% Elevated

15 reports

5 reporters · latest 2 hours ago

ISP	RAYIP NETWORKS - FZCO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60982
Domain Name	rayip.com
Country	🇷🇴 Romania
City	Bucharest, Bucharest

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 152.237.230.31

Export CSV

This IP address has been reported a total of 15 times from 5 distinct sources. 152.237.230.31 was first reported on October 12th 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: United States of America with 11 reports; Germany with 2 reports; Netherlands with 1 report. The most common categories in these recent reports were: Web App Attack 15 times; Bad Web Bot 12 times; Brute-Force 11 times; Hacking 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-16 04:46:30 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:46:22.284362 2026] [security2:error] [pid 9956:tid 9956] [client 152.237.230.31:57234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgweich.com"] [uri "/.git/info/refs"] [unique_id "atGsHkCvqoVHyLuARqnExgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 23:40:37 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 19:40:31.091081 2026] [security2:error] [pid 964:tid 964] [client 152.237.230.31:54548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sjstauffer.net"] [uri "/.git/info/refs"] [unique_id "atFkb6LRM3d2hNIxR129NQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-15 23:09:42 (8 hours ago)	[da.kdns.gr] httpd-config-scan: sites=rheumatologiko.gr; logs=/var/log/httpd/domains/rheumatologiko. ... show more [da.kdns.gr] httpd-config-scan: sites=rheumatologiko.gr; logs=/var/log/httpd/domains/rheumatologiko.gr.log; samples=/.git/info/refs \| fast_lane=true kernel_at=2026-10-15T22:58:37+00:00 \| requests=1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 21:14:21 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 17:14:18.179109 2026] [security2:error] [pid 3600:tid 3600] [client 152.237.230.31:48672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "montidaunitour.com"] [uri "/.git/info/refs"] [unique_id "atFCKo0Zg2TP6FTD-mYMSQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 19:50:22 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 15:50:14.782463 2026] [security2:error] [pid 27148:tid 27148] [client 152.237.230.31:40544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jsolanogranite.com"] [uri "/.git/info/refs"] [unique_id "atEudla4T6I0UhC1s5zt0gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 17:32:22 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 13:32:15.256382 2026] [security2:error] [pid 10522:tid 10651] [client 152.237.230.31:33310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.econpage.com"] [uri "/.git/info/refs"] [unique_id "atEOH1n_qD0aBbcc9pmo6gAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 14:39:43 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:39:35.877472 2026] [security2:error] [pid 32667:tid 32692] [client 152.237.230.31:41728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aclarityforensics.com"] [uri "/.git/info/refs"] [unique_id "atDlpyoe4CXK_qcaZ9HjbAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 21:40:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:40:37.485940 2026] [security2:error] [pid 28699:tid 28860] [client 152.237.230.31:34004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newports.net"] [uri "/.git/info/refs"] [unique_id "as_21bc9zYG0RmzY2sFWJwAAARg"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-10-14 13:57:53 (1 day ago)	csagent: score 20.1: secrets grab x2, 404 noise floor x1; 1 domain(s) in 2s	Web App Attack
🇳🇱 Alt255	2026-10-14 07:09:31 (2 days ago)	[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 152.237.230.31 - - [14/Oct/2026:09:09:26 +0200] "GET /.git/info/refs?service=git-upload-pack HTTP/2.0" 404 1920 "-" "git/2.53.0" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 17:52:32 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 13:52:27.984058 2026] [security2:error] [pid 32580:tid 32580] [client 152.237.230.31:42486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.register-yacht-st-vincent-grenadines.com"] [uri "/.git/info/refs"] [unique_id "as5v2ywFsn-e2I2unl9JyAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 07:49:04 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:48:57.286312 2026] [security2:error] [pid 24385:tid 24385] [client 152.237.230.31:48448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lanegraves.com"] [uri "/.git/info/refs"] [unique_id "as3iaemwF6q61302IlpWcgAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-12 21:58:20 (3 days ago)	Secret file probe \| method: GET \| path: /.git/info/refs \| ua: git/2.53.0	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 19:14:18 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:14:11.021688 2026] [security2:error] [pid 16437:tid 16437] [client 152.237.230.31:53896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindroothealth.com"] [uri "/.git/info/refs"] [unique_id "as0xg4CAWJ9cdUkUFXQ2SQAAACU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 13:57:51 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 152.237.230.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:57:43.004189 2026] [security2:error] [pid 3242:tid 3242] [client 152.237.230.31:59538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cinderellanapkins.com"] [uri "/.git/info/refs"] [unique_id "asznV9was1RAiJ_9TXilAAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 190.232.218.168

🇩🇪 164.30.17.82

🇺🇸 142.93.179.172

🇩🇪 128.14.225.164

🇰🇷 106.243.155.71

🇺🇸 66.132.195.120

🇻🇪 190.142.55.75

🇧🇷 190.109.98.158

🇫🇷 185.194.178.70

🇩🇪 164.90.179.152

🇺🇸 143.42.238.18

🇨🇳 121.46.244.20

🇺🇸 34.186.7.224

🇰🇷 20.214.147.109

🇺🇸 4.249.17.208

🇺🇸 193.37.201.168

🇦🇷 190.105.81.128

🇨🇳 171.115.106.209

🇺🇸 170.106.146.54

🇵🇰 160.30.104.100