AbuseIPDB » 31.13.127.114

31.13.127.114 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	Meta Platforms Ireland Limited
Usage Type	Commercial
Hostname(s)	fwdproxy-cln-114.fbsv.net
Domain Name	facebook.com
Country	Ireland
City	Clonee, Leinster

Important Note: 31.13.127.114 is an IP address from within our whitelist belonging to the subnet 31.13.64.0/18, which we identify as: "Facebook".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 31.13.127.114

Whois 31.13.127.114

IP Abuse Reports for 31.13.127.114:

This IP address has been reported a total of 32 times from 8 distinct sources. 31.13.127.114 was first reported on June 23rd 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
selahattinalan	2024-12-08 04:12:20 (13 hours ago)	31.13.127.114 - - [08/Dec/2024:07:12:14 +0300] "GET /lib/pkp/js/controllers/form/AjaxFormHandler.js ... show more31.13.127.114 - - [08/Dec/2024:07:12:14 +0300] "GET /lib/pkp/js/controllers/form/AjaxFormHandler.js HTTP/2.0" 200 4508 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" show less	Brute-Force
Anonymous	2024-12-06 15:27:05 (2 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
adalbertoreyes.org	2024-12-03 15:00:44 (5 days ago)	CategoryPortScan	Port Scan
hermawan	2024-12-03 11:06:36 (5 days ago)	[Tue Dec 03 10:45:04.176200 2024] [security2:error] [pid 551700:tid 128591089800896] [client 31.13.1 ... show more[Tue Dec 03 10:45:04.176200 2024] [security2:error] [pid 551700:tid 128591089800896] [client 31.13.127.114:48150] ModSecurity: Access denied with code 403 (phase 1). Match of "pm AppleWebKit Android" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2467"] [id "920300"] [msg "Request Missing an Accept Header"] [severity "NOTICE"] [ver "OWASP_CRS/4.8.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan/Analisis_Distibusi_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2023/02/Analisis_Bulanan_Distribusi_Curah_Hujan_Bulan_Februari_Tahun_2023_di_Provinsi_Jawa_Timur.jpg"] [unique_id "Z05-wMJgUfMxizA4XKnPcQAARlU"] [staklim-jatim.bmkg.go.id] [sta ... show less	Hacking Web App Attack
selahattinalan	2024-11-30 18:46:19 (1 week ago)	31.13.127.114 - - [30/Nov/2024:21:46:17 +0300] "GET /lib/pkp/js/controllers/form/FormHandler.js HTTP ... show more31.13.127.114 - - [30/Nov/2024:21:46:17 +0300] "GET /lib/pkp/js/controllers/form/FormHandler.js HTTP/2.0" 200 12460 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" show less	Brute-Force
hermawan	2024-11-30 15:50:43 (1 week ago)	[Sat Nov 30 21:32:27.190515 2024] [security2:error] [pid 140265:tid 136155834107584] [client 31.13.1 ... show more[Sat Nov 30 21:32:27.190515 2024] [security2:error] [pid 140265:tid 136155834107584] [client 31.13.127.114:59868] ModSecurity: Access denied with code 403 (phase 1). Match of "pm AppleWebKit Android" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2467"] [id "920300"] [msg "Request Missing an Accept Header"] [severity "NOTICE"] [ver "OWASP_CRS/4.8.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Prakiraan/03-Prakiraan-Bulanan/Prakiraan_Curah_Hujan_Bulanan/Prakiraan_Curah_Hujan_Bulanan_Provinsi_Jawa_Timur/2023/11/03_Prakiraan_Curah_Hujan_Bulan_MARET_2024_di_Provinsi_Jawa_Timur-Update_dari_Analisis_Bulan_November_2023.jpg"] [unique_id "Z0sh-0TALqnqSUv3YiLIXQAEzVM"] [staklim-jatim.bmkg.go.id] [st ... show less	Hacking Web App Attack
Anonymous	2024-11-29 23:34:16 (1 week ago)	Excessive crawling/scraping	Hacking Brute-Force
hermawan	2024-11-26 11:23:32 (1 week ago)	[Tue Nov 26 12:30:00.828023 2024] [security2:error] [pid 371336:tid 125778899093184] [client 31.13.1 ... show more[Tue Nov 26 12:30:00.828023 2024] [security2:error] [pid 371336:tid 125778899093184] [client 31.13.127.114:54890] ModSecurity: Access denied with code 403 (phase 1). Match of "pm AppleWebKit Android" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/modsecurity/coreruleset-4.8.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2467"] [id "920300"] [msg "Request Missing an Accept Header"] [severity "NOTICE"] [ver "OWASP_CRS/4.8.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/03-Analisis_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan/Analisis_Distibusi_Sifat_Hujan_Bulanan_Provinsi_Jawa_Timur/2023/07/Analisis_Bulanan_Distribusi_Sifat_Hujan_Bulan_Juli_Tahun_2023_di_Provinsi_Jawa_Timur.jpg"] [unique_id "Z0Vc2De8cUIMD23GseGLygAC9GM"] [staklim-jatim.bmkg.go.id] [staklim ... show less	Hacking Web App Attack
selahattinalan	2024-11-23 03:06:37 (2 weeks ago)	31.13.127.114 - - [23/Nov/2024:06:06:34 +0300] "GET /icaset/2023/pages/24/paper-guidelines?l=en HTTP ... show more31.13.127.114 - - [23/Nov/2024:06:06:34 +0300] "GET /icaset/2023/pages/24/paper-guidelines?l=en HTTP/2.0" 200 22596 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" show less	Brute-Force
Anonymous	2024-11-19 23:03:51 (2 weeks ago)	Excessive crawling/scraping	Hacking Brute-Force
selahattinalan	2024-11-14 02:59:56 (3 weeks ago)	31.13.127.114 - - [14/Nov/2024:05:59:55 +0300] "GET / HTTP/1.1" 301 473 "-" "facebookexternalhit/1.1 ... show more31.13.127.114 - - [14/Nov/2024:05:59:55 +0300] "GET / HTTP/1.1" 301 473 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" show less	Brute-Force
Anonymous	2024-11-12 03:01:32 (3 weeks ago)	Malicious activity detected	Hacking Web App Attack
hermawan	2024-11-09 16:09:04 (4 weeks ago)	[Sat Nov 09 23:09:03.533216 2024] [security2:error] [pid 24969:tid 135732137641664] [client 31.13.12 ... show more[Sat Nov 09 23:09:03.533216 2024] [security2:error] [pid 24969:tid 135732137641664] [client 31.13.127.114:43040] ModSecurity: Access denied with code 403 (phase 1). Match of "pm AppleWebKit Android" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/modsecurity/coreruleset-4.7.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "2489"] [id "920300"] [msg "Request Missing an Accept Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: host found within REQUEST_HEADERS:User-Agent: facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php) request_line = GET /images/Klimatologi/Infografis/Infografis-Iklim/Bulanan/Ekstrim/2024/03-Maret-2024/Infografis_Bulanan_Suhu_Udara_Minimum_Bulan_Maret_2024-600.jpg HTTP/2.0"] [severity "NOTICE"] [ver "OWASP_CRS/4.7.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag ... show less	Hacking Web App Attack
Anonymous	2024-11-08 11:42:38 (1 month ago)	Excessive crawling/scraping	Hacking Brute-Force
Anonymous	2024-11-06 03:26:32 (1 month ago)	Malicious activity detected	Hacking Web App Attack