JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.59.107.4

31.59.107.4 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 27%: ?

27%

ISP	PT Goer Network Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396356
Domain Name	atharva.co.id
Country	🇨🇴 Colombia
City	Bogota, Bogota D.C.

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.59.107.4

Whois 31.59.107.4

IP Abuse Reports for 31.59.107.4:

This IP address has been reported a total of 56 times from 34 distinct sources. 31.59.107.4 was first reported on July 27th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇴 AF	2026-06-19 18:13:20 (1 day ago)	Reporte automatizado de actividad sospechosa	DDoS Attack
🇨🇴 Dricci	2026-06-19 17:11:13 (1 day ago)	Reporte automatizado de actividad sospechosa	Port Scan
🇳🇱 Site.eu	2026-05-12 01:13:11 (1 month ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 4server	2026-05-11 21:22:44 (1 month ago)	[MonMay1123:22:39.7479332026][security2:error][pid3196407:tid3196536][client31.59.107.4:0]ModSecurit ... show more [MonMay1123:22:39.7479332026][security2:error][pid3196407:tid3196536][client31.59.107.4:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx/index\\\\\\\\.php\$\"against\"REQUEST_FILENAME\"required.[file\"/etc/apache2/conf.d/modsec_rules/51_asl_wordpress_extra.conf\"][line\"33\"][id\"333149\"][rev\"21\"][msg\"Atomicorp.comWAFRules:PossiblePHPwebshelldetectedandblocked\"][severity\"CRITICAL\"][hostname\"dellafoglia.ch\"][uri\"/wp-content/uploads/upload.php\"][unique_id\"agJIn_S3EQ5DF2gJBEymAAAAARI\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 MacLotsen	2026-05-09 23:52:30 (1 month ago)	[Sun May 10 01:51:44.695299 2026] [php7:error] [pid 4126613] [client 31.59.107.4:54089] script '/var ... show more [Sun May 10 01:51:44.695299 2026] [php7:error] [pid 4126613] [client 31.59.107.4:54089] script '/var/www/degastrobar.nl/wp-good.php' not found or unable to stat, referer: http://daxgastrobar.nl/wp-good.php [Sun May 10 01:52:04.231862 2026] [php7:error] [pid 4126562] [client 31.59.107.4:50439] script '/var/www/degastrobar.nl/simple.php' not found or unable to stat, referer: http://daxgastrobar.nl/simple.php [Sun May 10 01:52:29.550341 2026] [php7:error] [pid 4126613] [client 31.59.107.4:53125] script '/var/www/degastrobar.nl/log.php' not found or unable to stat, referer: http://daxgastrobar.nl/log.php ... show less	Web App Attack Brute-Force
🇬🇧 consul.to	2026-05-09 11:49:53 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-05-09 11:23:40 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 07:23:34.683489 2026] [security2:error] [pid 22546:tid 22546] [client 31.59.107.4:29747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidquiroa.com"] [uri "/wp-content/wp-config.php"] [unique_id "af8ZNu2ft4E9hG1t9KDMagAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-09 04:50:32 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 00:50:25.028882 2026] [security2:error] [pid 12680:tid 12680] [client 31.59.107.4:26869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidnevueconcerts.com"] [uri "/wp-content/wp-config.php"] [unique_id "af69EYFiMIO9c1VUvThcHAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-05-09 02:07:05 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-196) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-08 07:12:54 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 03:12:48.677002 2026] [security2:error] [pid 1618:tid 1618] [client 31.59.107.4:39611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danielbrower.com"] [uri "/wp-content/wp-config.php"] [unique_id "af2M8PU6u4t97UpaxK2L5AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-05-08 07:05:44 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇫🇷 masterguru	2026-05-08 06:17:55 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-197) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-08 01:52:54 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 21:52:47.437158 2026] [security2:error] [pid 2134:tid 2134] [client 31.59.107.4:25675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idmadventures.com"] [uri "/wp-config.php"] [unique_id "af1B7ymSS9paBfcYAuRDCgAAAAs"], referer: http://dangerousdisciple.com/wp-config.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 00:53:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.107.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 20:53:38.530936 2026] [security2:error] [pid 20123:tid 20123] [client 31.59.107.4:63677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancingbearprinting.com"] [uri "/wp-config.php"] [unique_id "af00Esl_p2Ue8lH-Cb5XQgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-05-07 13:21:16 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/themes/fukasawa/inc/classes/403.php /wp-conte ... show more Aggressive web search of vulnerable pages: /wp-content/themes/fukasawa/inc/classes/403.php /wp-content/themes/admin.php /system_core.php /222.p ... show less	Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.103

🇳🇱 152.42.137.51

🇨🇳 61.179.73.179

🇳🇱 45.148.10.157

🇦🇷 24.232.153.182

🇺🇸 24.14.37.194

🇺🇸 216.25.89.85

🇳🇱 176.65.139.242

🇳🇱 176.65.139.215

🇺🇸 162.216.149.213

🇺🇸 162.216.149.52

🇰🇷 119.203.251.187

🇹🇼 111.70.23.251

🇷🇴 80.94.92.184

🇩🇪 69.5.169.228

🇺🇸 65.49.1.241

🇬🇧 45.198.224.46

🇺🇸 20.14.73.54

🇷🇴 2.57.121.25

🇨🇳 182.242.168.106