JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.57.90.130

31.57.90.130

Neutral Activity

9 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

GOLD IP L.L.C-FZ

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396356

Domain Name

goldipv4.com

Country

🇯🇵 Japan

City

Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

31.57.90.130 has been reported 9 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 31.57.90.130:

This IP address has been reported a total of 9 times from 5 distinct sources. 31.57.90.130 was first reported on January 15th 2025, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-01-17 18:19:52 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 13:19:48.895274 2026] [security2:error] [pid 15438:tid 15438] [client 31.57.90.130:58867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/js../.git/config"] [unique_id "aWvSxBsgr9mOsRd7Z4ePMAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 18:18:08 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 13:17:39.129668 2025] [security2:error] [pid 30274:tid 30561] [client 31.57.90.130:58865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.com"] [uri "/.svn/entries"] [unique_id "aVLFw0PUzqrf53yng5XHFQAAAJM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 02:50:00 (9 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇮🇪 RoboSOC	2025-10-16 08:34:35 (10 months ago)	Bash Remote Code Execution Vulnerability , PTR: PTR record not found	Hacking
🇩🇪 dayda.net	2025-10-13 03:23:35 (10 months ago)	url=http://example.com	Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-27 01:14:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 21:14:40.420439 2025] [security2:error] [pid 404369:tid 404480] [client 31.57.90.130:51651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kettlehill.net"] [uri "/.env.dev.local"] [unique_id "aIV9gI1ApCwrT9-Kn8XCywAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-06-23 15:28:38 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-29 15:30:36 (1 year ago)	(mod_security) mod_security (id:221260) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:221260) triggered by 31.57.90.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 11:30:14.088864 2025] [security2:error] [pid 2876280:tid 2876280] [client 31.57.90.130:57407] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)\|\|autodiscover.farmers123.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/cgi-bin/test"] [unique_id "aDh9hk3f4An8ppiRelspXAAAABw"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-15 09:40:49 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.209.233.51

🇺🇸 167.172.203.111

🇺🇸 161.123.107.13

🇺🇸 143.137.166.220

🇭🇰 47.243.216.0

🇧🇬 46.10.201.91

🇿🇦 152.110.81.96

🇺🇸 136.29.52.7

🇺🇸 131.226.2.166

🇮🇳 103.39.247.147

🇳🇱 91.92.47.123

🇺🇸 74.87.117.150

🇺🇸 54.165.218.206

🇺🇸 52.248.41.146

🇺🇸 44.200.25.79

🇺🇸 43.173.77.7

🇩🇪 43.157.64.121

🇬🇧 35.203.210.215

🇺🇸 3.93.74.178

🇰🇷 220.127.148.6