JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.169.53.64

31.169.53.64 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 66%: ?

66%

ISP	Blix Group AS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS50304
Domain Name	blix.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.169.53.64

Whois 31.169.53.64

IP Abuse Reports for 31.169.53.64:

This IP address has been reported a total of 26 times from 20 distinct sources. 31.169.53.64 was first reported on December 12th 2025, and the most recent report was 25 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 bcsaba	2026-07-05 13:48:59 (25 minutes ago)	Probing for .git: 31.169.53.64 - - [05/Jul/2026:15:48:55 +0200] "GET /.git/HEAD HTTP/1.1" 403 146 "- ... show more Probing for .git: 31.169.53.64 - - [05/Jul/2026:15:48:55 +0200] "GET /.git/HEAD HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; git-head-fastscan/2.0)" show less	Web App Attack
🇧🇪 voormedia	2026-07-05 13:29:41 (45 minutes ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 13:28:59 (45 minutes ago)	(mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 09:28:54.541660 2026] [security2:error] [pid 10801:tid 10801] [client 31.169.53.64:53418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexgitlin.com"] [uri "/.git/HEAD"] [unique_id "akpcFkYTXJcJVKyVlJEkNQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 13:00:02 (1 hour ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 12:58:58 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:58:54.893600 2026] [security2:error] [pid 11991:tid 11991] [client 31.169.53.64:36528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegoldentether.com"] [uri "/.git/HEAD"] [unique_id "akpVDpblJO0PY59Osy9L_QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 nakordoni.eu	2026-07-05 12:30:03 (1 hour ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Blix Group AS (NO), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 42/100. show less	Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-07-05 12:20:52 (1 hour ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇺🇸 TPI-Abuse	2026-07-05 12:17:32 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:17:28.803915 2026] [security2:error] [pid 31843:tid 31843] [client 31.169.53.64:50340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kountz.org"] [uri "/.git/HEAD"] [unique_id "akpLWGZTU6rO02YW1ZWp0gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-07-05 12:16:52 (1 hour ago)	Triggered Cloudflare WAF (firewallCustom) from NO. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from NO. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.git/HEAD \| UA: Mozilla/5.0 (compatible; git-head-fastscan/2.0) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-05 11:05:14 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 07:05:08.443765 2026] [security2:error] [pid 9135:tid 9135] [client 31.169.53.64:52628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.git/HEAD"] [unique_id "ako6ZCNaWwTk5HVILzheVAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 nate naten	2026-07-05 10:53:47 (3 hours ago)	HoneyTrap: unknown_probe attempt on /.git/HEAD from Norway	Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-07-05 06:54:36 (7 hours ago)	Login credentials theft attempt	Hacking
🇺🇸 TPI-Abuse	2026-07-05 06:46:26 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.169.53.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 02:46:21.468640 2026] [security2:error] [pid 19049:tid 19066] [client 31.169.53.64:54788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uoexpanse.com"] [uri "/.git/HEAD"] [unique_id "akn9vZkhRmlE5vE6rdfGWQAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 matthieul.dev	2026-06-17 23:25:12 (2 weeks ago)	Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=58936	Port Scan Brute-Force
🇨🇳 pengpeng	2026-06-03 01:39:52 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 10127 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 10127 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:1ca3:b1e6:a0ce:944:e821:f64e

🇧🇷 200.199.32.174

🇮🇳 172.83.83.194

🇨🇳 163.125.125.19

🇳🇬 102.219.155.11

🇵🇰 72.255.13.91

🇺🇸 65.49.1.36

🇨🇳 36.135.62.103

🇬🇧 35.203.210.35

🇦🇷 186.13.24.118

🇮🇶 169.224.96.144

🇺🇸 157.245.126.134

🇩🇪 128.1.120.40

🇨🇳 113.141.72.65

🇺🇸 65.49.1.130

🇯🇵 47.91.21.128

🇷🇺 46.147.195.11

🇳🇱 45.148.10.151

🇧🇷 20.226.82.21

🇺🇸 18.224.39.217