JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 193.31.102.158

193.31.102.158 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 28%: ?

28%

ISP	Internet Tekhnologii LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49505
Domain Name	inethost.net
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 193.31.102.158

Whois 193.31.102.158

IP Abuse Reports for 193.31.102.158:

This IP address has been reported a total of 13 times from 10 distinct sources. 193.31.102.158 was first reported on June 10th 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 LRob	2026-08-28 15:40:09 (6 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /.env.test \| 2026-08-28 15:40 UTC show less	Hacking Web App Attack
Anonymous	2026-08-24 18:16:54 (4 days ago)	193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env HTTP/1.1" 403 124 "-" "python-httpx/0.28. ... show more 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.dev.local HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.preview HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.ci HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.staging HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.production.local HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.development HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.example HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 193.31.102.158 - - [24/Aug/2026:20:16:54 +0200] "GET /.env.staging.local HTTP/1.1" 403 124 "-" "python-httpx/0 ... show less	Bad Web Bot Web App Attack
🇩🇰 HostingGroup	2026-08-20 03:16:54 (1 week ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-08-20. show less	Bad Web Bot Web App Attack
🇮🇱 spd.co.il	2026-08-14 06:01:55 (2 weeks ago)	Web application attack detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 10:42:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 193.31.102.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.31.102.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:42:03.248589 2026] [security2:error] [pid 16904:tid 16904] [client 193.31.102.158:36225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brewingermany.com"] [uri "/.env.production"] [unique_id "akuGe0tNhv8lzHZVQaRJuAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 07:20:48 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 193.31.102.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.31.102.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 03:20:44.188758 2026] [security2:error] [pid 29102:tid 29102] [client 193.31.102.158:52657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brodyworks.com"] [uri "/.env.development.local"] [unique_id "ajjiTGXR4Sti4r1FR_mX7QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-20 21:59:30 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-19. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-18 03:01:03 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 193.31.102.158 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 193.31.102.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 23:00:55.639515 2026] [security2:error] [pid 4828:tid 4828] [client 193.31.102.158:40073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honeybeeawareness.org"] [uri "/.env.test.local"] [unique_id "ajNfZ1iPRUG4V17sAamvTQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-16 00:28:53 (2 months ago)	Abuse Detected (30)	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-06-12 08:54:19 (2 months ago)	IM360 WAF: Direct access to sensitive file or dotfile MV:/.env.local	Web App Attack
Anonymous	2026-06-08 09:20:04 (2 months ago)	\| [Dangerous/Russia] Aggressive IP 193.31.102.158 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Russia] Aggressive IP 193.31.102.158 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇳🇱 homeshowdomain.nl	2026-06-07 21:59:06 (2 months ago)	Auto-ban: >3000 req/min op 2026-06-07	Web App Attack SSH Hacking
🇸🇬 pusathosting.com	2023-06-10 06:39:03 (3 years ago)	2ds22 bruteforce	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.111.51.203

🇮🇩 163.7.6.114

🇮🇳 110.173.190.221

🇱🇹 213.176.26.19

🇵🇾 190.128.208.6

🇺🇿 87.192.253.110

🇫🇷 85.217.140.43

🇳🇱 80.57.195.24

🇫🇷 75.119.155.172

🇱🇹 62.60.130.201

🇳🇱 195.178.110.217

🇳🇱 85.11.167.127

🇺🇸 65.49.1.38

🇭🇰 64.90.11.178

🇰🇷 211.43.100.92

🇳🇱 204.76.203.21

🇮🇩 180.247.56.141

🇩🇪 167.94.145.27

🇳🇱 91.92.47.208

🇺🇸 35.225.66.22