JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.59.20.198

31.59.20.198 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 2%: ?

ISP	PT Goer Network Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205544
Domain Name	atharva.co.id
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.59.20.198

Whois 31.59.20.198

IP Abuse Reports for 31.59.20.198:

This IP address has been reported a total of 11 times from 3 distinct sources. 31.59.20.198 was first reported on May 27th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-01 02:44:08 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:44:04.097991 2026] [security2:error] [pid 7577:tid 7680] [client 31.59.20.198:42591] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kettlehill.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/wp-login.php.bak"] [unique_id "ahzx9I6nP6TlQzUBlJvYsgAAAMQ"], referer: http://kettlehill.com/wp-login.php.bak show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 06:37:06 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 01:36:57.084343 2026] [security2:error] [pid 2647:tid 2647] [client 31.59.20.198:50457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nbcnewsradio.com"] [uri "/.env.old"] [unique_id "aWncifwZ0cs5F5_11q5_XgAAAC4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 23:43:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:43:47.252673 2025] [security2:error] [pid 4918:tid 4918] [client 31.59.20.198:37311] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.farmers123.com"] [uri "/.env.bak"] [unique_id "aS95sxu61SfWPuCW5gdLfQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-12 16:28:39 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 11:28:32.180966 2025] [security2:error] [pid 2522:tid 2522] [client 31.59.20.198:42959] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.nbcnewsradio.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.nbcnewsradio.com"] [uri "/settings.php.bak"] [unique_id "aRS1sKnE36VtOurAyfgUYQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-01 15:16:26 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 11:16:20.376442 2025] [security2:error] [pid 9487:tid 9509] [client 31.59.20.198:60541] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.kettlehill.net\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.net"] [uri "/application/logs/application.log"] [unique_id "aN1FxEvyOqnYEaX7Ie47HwAAAMA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-26 03:43:17 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 23:43:13.471198 2025] [security2:error] [pid 26467:tid 26467] [client 31.59.20.198:55911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.deandobkin.com"] [uri "/.svn/entries"] [unique_id "aNYL0bWx9oyfpny2qOFxRwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 KuhA	2025-09-22 01:46:00 (8 months ago)	"GET /.htaccess HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-08-05 17:49:37 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 05 13:49:33.155670 2025] [security2:error] [pid 16468:tid 16468] [client 31.59.20.198:58271] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nbcnewsradio.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nbcnewsradio.com"] [uri "/server.key"] [unique_id "aJJELSsfDEWzIZjg3Fq3owAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-01 09:01:17 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 05:01:14.200895 2025] [security2:error] [pid 3904811:tid 3904891] [client 31.59.20.198:58529] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kettlehill.kettlehill.com\|F\|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.kettlehill.com"] [uri "/my.key"] [unique_id "aIyCWlxdmxur7baAoEM61AAAAlA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-01 05:32:57 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 01 01:32:39.081934 2025] [security2:error] [pid 2256136:tid 2256209] [client 31.59.20.198:56737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.kettlehill.com"] [uri "/wp-config.php.dist"] [unique_id "aDvl97VUnYIqO9hNDIS3yQAAAIU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-27 02:30:04 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2607:f8b0:4023:1803::121

🇩🇪 213.209.159.228

🇹🇭 203.150.171.123

🇺🇸 147.182.183.153

🇧🇬 79.124.59.78

🇺🇸 34.181.208.181

🇺🇸 20.66.122.118

🇺🇸 195.184.76.22

🇬🇧 193.163.125.98

🇩🇪 193.124.20.227

🇫🇷 185.237.102.136

🇭🇰 152.32.135.217

🇩🇪 104.207.58.64

🇵🇰 103.164.9.74

🇮🇳 103.115.194.115

🇺🇸 66.132.195.112

🇺🇸 66.132.186.241

🇩🇪 64.226.84.155

🇸🇬 34.142.152.242

🇸🇬 217.217.253.235