JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.59.20.93

31.59.20.93 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	PT Goer Network Indonesia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205544
Domain Name	atharva.co.id
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.59.20.93

Whois 31.59.20.93

IP Abuse Reports for 31.59.20.93:

This IP address has been reported a total of 15 times from 6 distinct sources. 31.59.20.93 was first reported on January 26th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 cheatmaster.store	2026-02-25 23:28:33 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: United Kingdom Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 08:38:06 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 03:37:55.905049 2026] [security2:error] [pid 13053:tid 13053] [client 31.59.20.93:55035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/.env.live"] [unique_id "aWtKY86SG-329iM2Nr-sDAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 17:52:18 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:52:02.926149 2025] [security2:error] [pid 30292:tid 30606] [client 31.59.20.93:47533] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kettlehill.com"] [uri "/wp-content/plugins/jsmol2wp/php/jsmol.php"] [unique_id "aVK_woGwzh_8AlcRvOiH3QAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 00:46:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 19:46:13.552477 2025] [security2:error] [pid 13584:tid 13626] [client 31.59.20.93:41863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.kettlehill.com"] [uri "/media../.git/config"] [unique_id "aSjw1eb7YZ3SjyQOwqY8tAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-13 09:29:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 04:29:07.831904 2025] [security2:error] [pid 12206:tid 12206] [client 31.59.20.93:42043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.bak"] [unique_id "aRWk42X3OzWef_5u_RQhAQAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-27 02:33:30 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 26 22:33:24.330594 2025] [security2:error] [pid 729657:tid 729695] [client 31.59.20.93:47985] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/.env.example"] [unique_id "aIWP9BUVDjlJfvQpjEJyCgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-21 19:28:23 (10 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-06-22 20:23:26 (11 months ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-05-30 01:15:45 (1 year ago)	(mod_security) mod_security (id:211190) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:211190) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 29 21:15:39.697297 2025] [security2:error] [pid 3895403:tid 3895403] [client 31.59.20.93:41671] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|mail.farmers123.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /magmi/web/ajax_pluginconf.php?file=../../../../../../../../../../../etc/passwd&plugintype=utilities&pluginclass=CustomSQLUtility"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.farmers123.com"] [uri "/magmi/web/ajax_pluginconf.php"] [unique_id "aDkGu6W8Q6ULJHkTpr-fBgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 dayda.net	2025-05-21 14:08:36 (1 year ago)	query: option=com_pro_desk&include_file=../../../../../../etc/passwd	Bad Web Bot
🇺🇸 Vincent Helmus	2025-05-16 17:40:19 (1 year ago)	ALL	DNS Compromise DNS Poisoning Fraud Orders DDoS Attack FTP Brute-Force Ping of Death Phishing Fraud VoIP Open Proxy Web Spam Email Spam Blog Spam VPN IP Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 TPI-Abuse	2025-05-04 08:37:27 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 04:37:21.446513 2025] [security2:error] [pid 3757059:tid 3757059] [client 31.59.20.93:54813] [client 31.59.20.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nbcnewsradio.com"] [uri "/.env.development.local"] [unique_id "aBcnQYR9VcJHy87MO40J-QAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-19 03:11:46 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 31.59.20.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 23:10:41.613028 2025] [security2:error] [pid 14944:tid 14969] [client 31.59.20.93:50675] [client 31.59.20.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.spinningdesigns.com"] [uri "/wp-config.php.html"] [unique_id "aAMUMalkjOMtrQ4IEmnjCgAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-09 08:12:19 (1 year ago)	Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH
Anonymous	2025-01-26 02:40:20 (1 year ago)	\| Common web attack.	Hacking SQL Injection Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.96.44.234

🇭🇺 217.113.49.143

🇺🇸 216.128.154.127

🇧🇪 198.235.24.172

🇲🇽 186.96.145.241

🇨🇳 183.1.91.26

🇳🇱 176.65.139.103

🇳🇱 144.31.224.182

🇻🇳 113.173.89.105

🇺🇸 104.168.198.241

🇬🇧 82.15.77.165

🇷🇴 80.94.92.164

🇺🇸 65.49.1.140

🇳🇱 45.88.0.252

🇺🇸 40.124.185.240

🇬🇧 35.203.210.42

🇧🇪 198.235.24.220

🇨🇳 180.76.226.129

🇦🇺 149.118.68.211

🇫🇮 147.185.133.41