JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.58.16.103

31.58.16.103 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	PT Goer Network Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS397423
Domain Name	atharva.co.id
Country	🇺🇸 United States of America
City	Bend, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.58.16.103

Whois 31.58.16.103

IP Abuse Reports for 31.58.16.103:

This IP address has been reported a total of 10 times from 5 distinct sources. 31.58.16.103 was first reported on January 15th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Thaliruth	2026-06-18 15:39:19 (2 months ago)	[18/Jun/2026:17:39:18.833078 +0200] ajQRJuvHADE08JBXBP1nYQAAABI 31.58.16.103 38566 127.0.0.1 7081 .. ... show more [18/Jun/2026:17:39:18.833078 +0200] ajQRJuvHADE08JBXBP1nYQAAABI 31.58.16.103 38566 127.0.0.1 7081 ... show less	Hacking
Anonymous	2026-05-01 20:30:52 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 10:37:49 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 05:37:16.943425 2025] [security2:error] [pid 9237:tid 9237] [client 31.58.16.103:41301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.old"] [unique_id "aRW03GYYHJVHhkeJMNZZRgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 18:40:12 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 14:40:04.765514 2025] [security2:error] [pid 28115:tid 28134] [client 31.58.16.103:60993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.fandgins.com"] [uri "/htaccess_for_page_not_found_redirects.htaccess"] [unique_id "aQEOBD2hXxJMRgJrx_NR5gAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 00:17:15 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 20:16:58.930627 2025] [security2:error] [pid 172229:tid 172476] [client 31.58.16.103:58491] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kettlehill.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.net"] [uri "/translate.sql"] [unique_id "aIVv-uZd-uShJ73phjvmyAAAAQs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-29 21:41:32 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 17:41:24.717305 2025] [security2:error] [pid 3574973:tid 3574973] [client 31.58.16.103:52403] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.farmers123.com"] [uri "/media../.git/config"] [unique_id "aDjUhCR7ve62Pk9rn1FgQgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-19 05:38:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 01:38:19.971657 2025] [security2:error] [pid 21918:tid 21962] [client 31.58.16.103:35025] [client 31.58.16.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.spinningdesigns.com"] [uri "/.env.www.blog"] [unique_id "aAM2yweuzxcxD3NbLt-v1AAAAYk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-27 14:55:23 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.58.16.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:55:11.432343 2025] [security2:error] [pid 27064:tid 27267] [client 31.58.16.103:47369] [client 31.58.16.103] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.kettlehill.kettlehill.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kettlehill.kettlehill.com"] [uri "/log/error.log"] [unique_id "Z8B8z2oEVIU_Tl3JLGh0ZQAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-26 09:25:54 (1 year ago)	31.58.16.103 - - [26/Jan/2025:10:25:53 +0100] "GET /../../../../../../../../windows/win.ini HTTP/1.1 ... show more 31.58.16.103 - - [26/Jan/2025:10:25:53 +0100] "GET /../../../../../../../../windows/win.ini HTTP/1.1" 400 485 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" ... show less	Hacking
Anonymous	2025-01-15 09:40:43 (1 year ago)	\| PHPMyAdmin scans (looking for setup.php).	Hacking SQL Injection Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2001:41d0:801:2000::1498

🇸🇪 213.212.8.245

🇳🇱 204.76.203.43

🇺🇸 166.88.3.254

🇺🇸 146.190.79.58

🇸🇪 128.127.105.151

🇨🇳 117.33.242.180

🇵🇱 109.205.211.110

🇺🇸 107.172.158.146

🇵🇱 95.214.53.196

🇸🇰 95.103.235.67

🇩🇪 77.25.34.33

🇺🇸 64.62.156.24

🇨🇳 39.106.21.251

🇧🇩 27.123.253.224

🇨🇳 240e:946:6004:209::18

🇨🇳 182.54.23.160

🇫🇷 151.123.177.133

🇨🇳 144.123.77.65

🇳🇬 135.129.124.35