JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.220.111.164

31.220.111.164 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 63%: ?

63%

ISP	VPS Servers
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47583
Hostname(s)	srv1704588.hstgr.cloud
Domain Name	hostinger.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Manchester, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.220.111.164

Whois 31.220.111.164

IP Abuse Reports for 31.220.111.164:

This IP address has been reported a total of 24 times from 18 distinct sources. 31.220.111.164 was first reported on May 26th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 arthome.info	2026-06-03 09:08:00 (2 weeks ago)	mega scraper	Bad Web Bot
🇩🇪 Carsten	2026-06-01 09:06:06 (2 weeks ago)	GET [.git/config]	Port Scan
🇯🇵 Valhalla	2026-06-01 03:50:39 (2 weeks ago)	Ewww, a file system command: /.env.production	Hacking Web App Attack
Anonymous	2026-06-01 03:45:02 (2 weeks ago)	suspicious request in access.log	Web App Attack
🇨🇭 YF	2026-06-01 00:05:08 (2 weeks ago)	Malicious activity detected — automated analysis	Brute-Force Web App Attack
🇩🇪 4server	2026-05-31 19:11:20 (2 weeks ago)	[SunMay3121:11:18.5804742026][security2:error][pid1582096:tid1582126][client31.220.111.164:0]ModSecu ... show more [SunMay3121:11:18.5804742026][security2:error][pid1582096:tid1582126][client31.220.111.164:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"serban.ch\"][uri\"/.git/HEAD\"][unique_id\"ahyH1gOOMeHMQrScWm4TvQAAAAA\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 18:54:44 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.220.111.164 (srv1704588.hstgr.cloud): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 31.220.111.164 (srv1704588.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 14:54:36.518413 2026] [security2:error] [pid 12647:tid 12647] [client 31.220.111.164:42892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "philcarta.com"] [uri "/.git/config"] [unique_id "ahsybH7cdQW3BRb_e9FbPQAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-05-30 18:26:04 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 mnsf	2026-05-29 13:05:32 (2 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2026-05-29 04:44:31 (3 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 Axel	2026-05-29 04:38:02 (3 weeks ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/HEAD Se ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/HEAD Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇺🇸 TPI-Abuse	2026-05-29 01:30:18 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.220.111.164 (srv1704588.hstgr.cloud): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 31.220.111.164 (srv1704588.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 21:30:08.559852 2026] [security2:error] [pid 3532:tid 3532] [client 31.220.111.164:51276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebestproduct.guru"] [uri "/.git/config"] [unique_id "ahjsINvu5MShhKGJjiga2QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-05-29 00:39:26 (3 weeks ago)	.env scanning [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 10:55:23 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.220.111.164 (srv1704588.hstgr.cloud): 1 in t ... show more (mod_security) mod_security (id:210492) triggered by 31.220.111.164 (srv1704588.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 06:55:19.330057 2026] [security2:error] [pid 16017:tid 16017] [client 31.220.111.164:38962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exit10band.com"] [uri "/.git/HEAD"] [unique_id "ahgfF9LHE2LtRKlbySuuMwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Starburst SysOp Team	2026-05-28 02:10:13 (3 weeks ago)	Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 164.111.220.31.rbl.malw ... show more Malware host (X-Forwarded-For) detected by rbl.malware.expert. RBL lookup of 164.111.220.31.rbl.malware.expert succeeded at REQUEST_HEADERS:x-forwarded-for. (1001000-mnz6-3) show less	Hacking

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 103.74.11.78

🇺🇸 98.159.37.223

🇺🇸 20.163.74.182

🇮🇳 103.127.30.137

🇧🇷 45.164.251.106

🇺🇸 45.33.14.5

🇩🇪 3.73.123.138

🇷🇴 2.57.122.177

🇨🇭 209.99.189.177

🇺🇸 208.87.243.51

🇯🇵 168.138.45.219

🇬🇧 161.35.163.75

🇺🇸 159.223.112.94

🇺🇸 137.184.210.103

127.0.0.1

🇧🇩 103.183.140.127

🇫🇷 85.217.140.25

🇳🇱 45.148.10.230

🇧🇪 34.77.72.72

🇨🇳 220.205.123.19