AbuseIPDB » 31.171.130.122

31.171.130.122 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 47%: ?

47%

ISP	Netrouting B.V.
Usage Type	Fixed Line ISP
ASN	AS206092
Domain Name	expressvpn.com
Country	United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 31.171.130.122

Whois 31.171.130.122

IP Abuse Reports for 31.171.130.122:

This IP address has been reported a total of 82 times from 41 distinct sources. 31.171.130.122 was first reported on November 28th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-06-29 22:13:23 (1 week ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/31.171.130.122 ... show moreThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/31.171.130.122 2025-06-29 06:28:49 / 2025-06-29 06:29:47 /fedex/.env 2025-06-29 06:31:48 /_info-backoffice.php show less	Web App Attack
joecalibre	2025-06-29 00:40:01 (1 week ago)	Malicious activity detected by monitoring system. Attack types observed: LFI.	Web App Attack
ThreatBook.io	2025-06-28 22:14:51 (1 week ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/31.171.130.122 ... show moreThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/31.171.130.122 2025-06-28 14:54:26 /api/config.js show less	Web App Attack
TPI-Abuse	2025-06-24 04:54:30 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 24 00:54:23.751436 2025] [security2:error] [pid 1725174:tid 1725174] [client 31.171.130.122:62603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bbernal.com"] [uri "/.env.txt"] [unique_id "aFovfyve4xwKXvrJkmKSdQAAAAc"], referer: http://bbernal.com show less	Brute-Force Bad Web Bot Web App Attack
BlueWire Hosting	2025-06-24 04:10:12 (2 weeks ago)	Scanning for Laravel vulnerabilities	Web App Attack
TPI-Abuse	2025-06-24 03:36:57 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 23:36:51.354462 2025] [security2:error] [pid 2956488:tid 2956488] [client 31.171.130.122:15915] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmnr.net"] [uri "/.env.test"] [unique_id "aFodU1EnBURk_J845AGtKAAAAA8"], referer: http://kmnr.net show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-24 00:30:45 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 20:30:39.121322 2025] [security2:error] [pid 4192682:tid 4192682] [client 31.171.130.122:8537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "televisonic.com"] [uri "/.env.backup"] [unique_id "aFnxry9BlpLs4nvCZBAiOQAAAAs"], referer: http://televisonic.com show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-24 00:11:15 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 20:11:11.765042 2025] [security2:error] [pid 30184:tid 30184] [client 31.171.130.122:38993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "norinpaco.com"] [uri "/.env.bak"] [unique_id "aFntH8BqQEQdoW-2-o7PegAAAAc"], referer: http://norinpaco.com show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-23 23:33:35 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 19:33:31.909781 2025] [security2:error] [pid 1255076:tid 1255076] [client 31.171.130.122:10347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webwzl.com"] [uri "/.env.production"] [unique_id "aFnkS1zL-pIEZQZC26c4FwAAAAU"], referer: http://webwzl.com show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-23 23:02:19 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 19:02:16.699055 2025] [security2:error] [pid 531796:tid 531796] [client 31.171.130.122:28575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k0cgy.net"] [uri "/.env.txt"] [unique_id "aFnc-DP1KLOMZ-V4oOt2wgAAAA4"], referer: http://k0cgy.net show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-23 20:57:22 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 16:57:17.138706 2025] [security2:error] [pid 245631:tid 245631] [client 31.171.130.122:54609] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maprada92.com"] [uri "/.env"] [unique_id "aFm_rcAqr1FTU2l8kT2HHAAAAAI"], referer: http://maprada92.com show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-23 19:58:55 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 15:58:49.585688 2025] [security2:error] [pid 2415258:tid 2415258] [client 31.171.130.122:37445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloggersunlimited.com"] [uri "/.env.production"] [unique_id "aFmx-XY5qowJkInNa3ZV6wAAAAY"], referer: http://cloggersunlimited.com show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-06-23 18:39:00 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 14:38:53.606686 2025] [security2:error] [pid 3058504:tid 3058504] [client 31.171.130.122:35897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infinite-fitness.com"] [uri "/config/.env"] [unique_id "aFmfPXi7GytspriRejtd-gAAABI"], referer: http://infinite-fitness.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-23 18:17:53 (2 weeks ago)	Restricted File Access Requests	Hacking Brute-Force
TPI-Abuse	2025-06-23 17:36:03 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 31.171.130.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 23 13:35:56.501072 2025] [security2:error] [pid 1008475:tid 1008475] [client 31.171.130.122:21445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wcurtislloyd.com"] [uri "/.env.old"] [unique_id "aFmQfBgmc4-MjSMqN1wiWQAAAAo"], referer: http://wcurtislloyd.com show less	Brute-Force Bad Web Bot Web App Attack