JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

31.42.185.148

Neutral Activity

Abuse Confidence Score

0% Low Risk

9 reports

3 reporters · latest 7 months ago

ISP: Virtual Systems LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS30860
Hostname(s): ip148.pflauto.eu.com
Domain Name: vsys.host
Country: 🇺🇦 Ukraine
City: Kyiv, Kyiv City

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

31.42.185.148 has been reported 9 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

9 from 3 distinct reporters

First reported

March 19th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 on-com	2026-03-29 23:20:25 UTC · (7 months ago)	URL scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-29 22:37:48 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 18:37:41.353961 2026] [security2:error] [pid 23759:tid 23759] [client 31. ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 18:37:41.353961 2026] [security2:error] [pid 23759:tid 23759] [client 31.42.185.148:7853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwipapuri-abadi.com"] [uri "/web/.env"] [unique_id "acmptWRNToilL_SdyFwXmwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-29 01:00:07 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 20:59:58.207024 2026] [security2:error] [pid 15202:tid 15202] [client 31. ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 20:59:58.207024 2026] [security2:error] [pid 15202:tid 15202] [client 31.42.185.148:9057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armstrongpartnersllc.com.ssl-grp.com"] [uri "/.env.production"] [unique_id "ach5jj90gyVAYUUj1z4qHgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 11:32:22 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 07:32:14.839708 2026] [security2:error] [pid 7158:tid 7158] [client 31.42 ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 07:32:14.839708 2026] [security2:error] [pid 7158:tid 7158] [client 31.42.185.148:30037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.moanddoyle.michaelprussin.com"] [uri "/.env.backup"] [unique_id "ace8Pu8BLgdOQdl43Mzx9QAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 08:59:50 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 04:59:45.747964 2026] [security2:error] [pid 12600:tid 12617] [client 31. ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 04:59:45.747964 2026] [security2:error] [pid 12600:tid 12617] [client 31.42.185.148:46679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mailporte.com"] [uri "/app/.env"] [unique_id "aceYgUKYOcFJbmBJJEQKBQAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 06:37:16 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 02:37:11.371468 2026] [security2:error] [pid 8518:tid 8518] [client 31.42 ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 02:37:11.371468 2026] [security2:error] [pid 8518:tid 8518] [client 31.42.185.148:20887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steamboatrowena.com"] [uri "/laravel/.env"] [unique_id "acd3FyyrkCYq5ySwJgSVyQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-28 05:37:40 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 01:37:34.499838 2026] [security2:error] [pid 32025:tid 32025] [client 31. ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 01:37:34.499838 2026] [security2:error] [pid 32025:tid 32025] [client 31.42.185.148:4815] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wholesaleglassjars.com"] [uri "/.env.save"] [unique_id "acdpHrpB1KRdOLJ5DG6H6wAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Jordy	2026-03-19 10:57:50 UTC · (7 months ago)	19/Mar/2026:11:52:34.947416 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 31.42.185.148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTAC ... show more 19/Mar/2026:11:52:34.947416 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 31.42.185.148] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /laravel/.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "jordymarije.nl"] [uri "/laravel/.env"] [unique_id "abvVcmGLh2-wEtvbi0Jr5gAAAAg"] 19/Mar/2026:11:52:34.947416 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 31.42.185.148] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id " ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-19 08:37:41 UTC · (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:37:36.672656 2026] [security2:error] [pid 2520:tid 2520] [client 31.42 ... show more (mod_security) mod_security (id:210492) triggered by 31.42.185.148 (ip148.pflauto.eu.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 04:37:36.672656 2026] [security2:error] [pid 2520:tid 2520] [client 31.42.185.148:18347] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modalguitarist.com"] [uri "/.env.backup"] [unique_id "abu10GmdzkMSgi9zmD_3gwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 151.243.11.107

🇧🇪 34.76.33.44

🇲🇽 189.135.134.230

🇦🇷 181.169.172.246

🇺🇸 172.70.38.165

🇨🇴 161.10.77.51

🇨🇳 112.29.109.174

🇺🇸 104.18.35.41

🇺🇸 20.106.75.210

🇳🇱 200.138.46.42

🇷🇴 193.46.255.86

🇷🇴 193.46.255.51

🇳🇱 185.223.235.39

🇳🇱 77.67.26.2

🇳🇵 43.245.86.55

🇬🇧 31.14.254.5

🇯🇵 203.25.124.85

🇨🇴 181.62.56.18

🇳🇱 81.19.216.106

🇳🇱 77.67.26.94