31.13.127.85

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
18 reports
14 reporters · latest 2 days ago

31.13.127.85 is on our whitelist as Facebook via the subnet 31.13.96.0/19.

ISP
Meta Platforms Ireland Limited
Usage Type
Commercial
ASN
AS32934
Hostname(s)
fwdproxy-cln-085.fbsv.net
Domain Name
facebook.com
Country
🇮🇪 Ireland
City
Clonee, Leinster
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇪 Belgium 2 🇩🇪 Germany 1 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1
Most common categories Hacking 4 Web App Attack 2 Bad Web Bot 2 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. This IP is on our whitelist as Facebook. Shared services like this are often reported for traffic that is not abuse, so review the reports before blocking.
Reporter IoA Timestamp (UTC) Comment Categories
🇧🇪 micmor_asbl
ase-88 : Bloc AI bots=>/templates/asbldeslocaux20241215/images/logo2021.png(facebookexternalhit)
Hacking
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/LU52422Content/images/site/0cef367d570f4aca8d0c027cd84928f3_600.png)
Hacking Bad Web Bot Web App Attack
🇧🇪 micmor_asbl
ase-88 : Bloc AI bots=>/images/site/Logo_site_web-t6.webp(facebookexternalhit)
Hacking
🇧🇪 micmor_asbl
ase-88 : Bloc AI bots=>/images/site/Logo_site_web-t6.webp(facebookexternalhit)
Hacking
🇩🇪 Ingo_CCAA
pse-88 : Bloc AI bots=>/images/pagebuilderck/logo_polizeisportverein_koeln_schwimmen01.jpg(facebookexternalhit)
Hacking
🇸🇬 serverutama
Nginx scanner: 31.13.127.85 - - [07/Jun/2026:09:10:00 +0700] "GET /wp-content/uploads/2022/03/2-2.jpg HTTP/1.1" 404 10401 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" "-"
Web App Attack Bad Web Bot
Anonymous
31.13.127.85 - - [11/May/2026:12:54:42 +0200] "GET /wp-content/uploads/2026/01/- HTTP/2.0" 200 137688 "-" "facebookexternalhit/1.1 (+http:///externalhit_uatext.php)"
Web App Attack
🇮🇩 David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 Phenix Info
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇺🇸 Rip
Automated recon attempt targeting restricted and sensitive paths.
Web App Attack
🇷🇺 DZBOT
DZBOT: Website Scanning / Scraping
Bad Web Bot Exploited Host Web App Attack
🇩🇪 Carsten
Bad web bot [meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)]
Bad Web Bot
🇩🇪 Phenix Info
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇩🇪 iNetWorker
trolling for resource vulnerabilities
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 168.144.58.137
🇳🇱 89.248.172.9
🇺🇸 72.211.248.128
🇺🇸 207.231.108.211
🇲🇽 189.190.172.250
🇰🇷 118.130.168.66
🇰🇷 118.37.214.187
🇺🇸 103.203.57.15
🇫🇷 82.102.18.190
🇩🇪 69.5.169.199
🇬🇧 35.203.211.201
🇧🇷 200.39.144.254
🇺🇸 199.165.159.96
🇧🇷 177.36.214.46
🇺🇸 172.96.5.133
🇺🇸 165.245.174.15
🇳🇱 86.38.187.108
🇲🇾 49.124.153.31
🇬🇧 35.203.211.142
🇲🇺 197.227.8.186
feedback