JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.56.58.59

31.56.58.59 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 100%: ?

100%

ISP	Zkillu SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215599
Hostname(s)	59.as215599.net
Domain Name	zkillu.fr
Country	🇫🇷 France
City	Saint-Denis, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.56.58.59

Whois 31.56.58.59

IP Abuse Reports for 31.56.58.59:

This IP address has been reported a total of 108 times from 85 distinct sources. 31.56.58.59 was first reported on July 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-18 22:35:53 (1 day ago)	[Fri Sep 18 02:01:46.864115 2026] [authz_core:error] [pid 414280:tid 414346] [client 31.56.58.59:355 ... show more [Fri Sep 18 02:01:46.864115 2026] [authz_core:error] [pid 414280:tid 414346] [client 31.56.58.59:35564] AH01630: client denied by server configuration: /var/www/_live/data.csabazar.hu/html/api [Fri Sep 18 02:01:48.041955 2026] [authz_core:error] [pid 414281:tid 414381] [client 31.56.58.59:35576] AH01630: client denied by server configuration: /var/www/_live/data.csabazar.hu/html/api, referer: http://data.csabazar.hu/api/session/properties [Fri Sep 18 02:01:51.627635 2026] [authz_core:error] [pid 414281:tid 414384] [client 31.56.58.59:35578] AH01630: client denied by server configuration: /var/www/_live/data.csabazar.hu/html/api [Fri Sep 18 02:01:51.833694 2026] [authz_core:error] [pid 414280:tid 414352] [client 31.56.58.59:35588] AH01630: client denied by server configuration: /var/www/_live/data.csabazar.hu/html/api [Fri Sep 18 02:01:52.025638 2026] [authz_core:error] [pid 414281:tid 414385] [client 31.56.58.59:35604] AH01630: client denied by server configuration: /var/www/_live/data ... show less	Brute-Force Web App Attack
🇮🇳 evicky2002	2026-09-18 06:00:02 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 hero2026	2026-09-18 04:12:31 (2 days ago)	Blocked by Fail2ban	Web App Attack
Anonymous	2026-09-18 03:53:13 (2 days ago)	31.56.58.59 - - [17/Sep/2026:15:28:52 -0300] "GET /api/session/properties HTTP/1.1" 404 826 "https:/ ... show more 31.56.58.59 - - [17/Sep/2026:15:28:52 -0300] "GET /api/session/properties HTTP/1.1" 404 826 "https://guiasorocabano.com.br/api/session/properties" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 31.56.58.59 - - [17/Sep/2026:15:28:52 -0300] "GET /api/session/properties HTTP/1.1" 404 826 "https://guiasorocabano.com.br/api/session/properties" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 31.56.58.59 - - [17/Sep/2026:21:46:35 -0300] "GET /api/session/properties HTTP/1.1" 404 1129 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 31.56.58.59 - - [17/Sep/2026:21:46:35 -0300] "GET /api/session/properties HTTP/1.1" 404 1129 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" 31.56.58.59 - - [18/Sep/2026:00:53:12 -0300] "GET /api/session/properties HTTP/1.1" 404 96 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" ... show less	Port Scan
🇺🇸 etu brutus	2026-09-18 03:34:06 (2 days ago)	31.56.58.59 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇩🇪 LRob	2026-09-18 03:20:55 (2 days ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: /api/session/properties \| 2026-09-18 03:20 UTC show less	Bad Web Bot
🇨🇦 Sakusen	2026-09-18 03:03:50 (2 days ago)	Automated web scanning: 8 reqs, 1 paths probed, 8 returned 404; probed: 1 other	Bad Web Bot
🇯🇵 tk-probe-jp	2026-09-18 02:21:55 (2 days ago)	Port scan: 9 blocked connection attempts to 3 distinct TCP port(s) between 2026-09-18T02:21Z and 202 ... show more Port scan: 9 blocked connection attempts to 3 distinct TCP port(s) between 2026-09-18T02:21Z and 2026-09-18T02:21Z UTC. Ports targeted: 80, 443, 3000. Detected by an edge firewall. No connection was established. show less	Port Scan
🇩🇪 ITSNF	2026-09-18 02:10:04 (2 days ago)	Blocked by os-abuseipdb; 9 hits, proto=tcp, ports=3000,443,80	Port Scan Hacking
🇩🇪 Philister11	2026-09-18 00:35:35 (2 days ago)	CrowdSec: LePresidente/http-generic-403-bf (FR/AS215599)	Web App Attack Brute-Force
🇩🇪 kingjan1999	2026-09-18 00:04:20 (2 days ago)	Blocked by UFW [3000/tcp] \| SPT: 42672 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [3000/tcp] \| SPT: 42672 \| TTL: 55 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-17 23:15:28 (2 days ago)	[Fri Sep 18 01:15:24.992411 2026] [authz_core:error] [pid 1381496] [client 31.56.58.59:43686] AH0163 ... show more [Fri Sep 18 01:15:24.992411 2026] [authz_core:error] [pid 1381496] [client 31.56.58.59:43686] AH01630: client denied by server configuration: /var/www/html/default/api [Fri Sep 18 01:15:25.077566 2026] [authz_core:error] [pid 1380312] [client 31.56.58.59:43688] AH01630: client denied by server configuration: /var/www/html/default/api, referer: http://narrowblast-usercontent.amo.rocks/api/session/properties [Fri Sep 18 01:15:26.153653 2026] [authz_core:error] [pid 1378000] [client 31.56.58.59:43704] AH01630: client denied by server configuration: /var/www/html/default/api [Fri Sep 18 01:15:27.222915 2026] [authz_core:error] [pid 1377998] [client 31.56.58.59:43712] AH01630: client denied by server configuration: /var/www/html/default/api [Fri Sep 18 01:15:28.279453 2026] [authz_core:error] [pid 1377999] [client 31.56.58.59:43720] AH01630: client denied by server configuration: /var/www/html/default/api ... show less	Web App Attack
🇬🇧 consul.to	2026-09-17 23:05:26 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-17 22:37:56 (2 days ago)	2026-09-18T00:37:55.721770+02:00 vps kernel: [6055475.691253] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-09-18T00:37:55.721770+02:00 vps kernel: [6055475.691253] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=31.56.58.59 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=44117 DF PROTO=TCP SPT=34760 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-09-17 22:32:16 (2 days ago)	Blocked by firewall on hugin [3000/tcp] \| Rule: AbuseIPDB \| SPT: 53908 \| TTL: 56 \| LEN: 60 \| TOS: 0x ... show more Blocked by firewall on hugin [3000/tcp] \| Rule: AbuseIPDB \| SPT: 53908 \| TTL: 56 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 4.240.96.30

🇺🇸 165.254.241.241

🇳🇱 77.239.124.173

🇺🇸 71.6.238.42

🇺🇸 64.23.177.237

🇮🇱 34.165.228.89

🇹🇼 34.80.137.17

🇰🇷 203.236.95.41

🇷🇺 195.218.159.123

🇮🇳 136.232.11.10

🇯🇵 104.234.140.121

🇮🇳 103.182.132.154

🇮🇩 103.168.135.187

🇬🇧 35.203.210.210

🇫🇷 13.140.168.163

🇮🇩 163.61.134.228

🇬🇧 138.68.182.163

🇳🇱 109.160.32.68

🇹🇷 78.187.206.159

🇳🇱 77.239.124.181