AbuseIPDB » 31.7.62.57

31.7.62.57 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 40%: ?

40%

ISP	CLIENT1151
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51852
Hostname(s)	hostedby.privatelayer.com
Domain Name	privatelayer.com
Country	Switzerland
City	Lugano, Ticino

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 31.7.62.57

Whois 31.7.62.57

IP Abuse Reports for 31.7.62.57:

This IP address has been reported a total of 105 times from 42 distinct sources. 31.7.62.57 was first reported on April 19th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
mnsf	2025-02-28 12:05:12 (3 weeks ago)	Too many Status 40X (11)	Brute-Force Web App Attack
taivas.nl	2025-02-28 05:32:27 (3 weeks ago)	Many_bad_calls	Web App Attack
TPI-Abuse	2025-02-28 04:40:30 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 23:40:27.213809 2025] [security2:error] [pid 10186:tid 10186] [client 31.7.62.57:15731] [client 31.7.62.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "save1vet.org"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Z8E-O3pKrMU8aDAmOQRIkwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Cloudkul Cloudkul	2025-02-28 04:24:12 (3 weeks ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show moreAttempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
4server	2025-02-28 01:31:10 (1 month ago)	[FriFeb2802:31:06.1948032025][security2:error][pid4070123:tid4070158][client31.7.62.57:0][client31.7 ... show more[FriFeb2802:31:06.1948032025][security2:error][pid4070123:tid4070158][client31.7.62.57:0][client31.7.62.57]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"wp-config.php\"atARGS:file.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][id\"344360\"][rev\"5\"][msg\"Atomicorp.comWAFRules:UnauthorizedOperatingSystemFileAccessAttempt\"][data\"MatchedData:wp-config.phpfoundwithinARGS:file:/wp-config.php\"][severity\"CRITICAL\"][tag\"attack-lfi\"][hostname\"vg13.ch\"][uri\"/wp-admin/admin-ajax.php\"][unique_id\"Z8ER2vI2XYapW-DrkBUHCAAAAAU\"][FriFeb2802:31:06.5868972025][security2:error][pid4070123:tid4070158][client31.7.62.57:0][client31.7.62.57]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.web show less	Port Scan Brute-Force Web App Attack
Anonymous	2025-02-28 00:29:31 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_APACHE_403	Brute-Force SSH
cmbplf	2025-02-27 19:28:13 (1 month ago)	179 requests to *.php.bak	Brute-Force Bad Web Bot
TPI-Abuse	2025-02-27 19:03:58 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 14:03:54.383269 2025] [security2:error] [pid 26935:tid 26935] [client 31.7.62.57:27751] [client 31.7.62.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blacksheepoffroad.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Z8C3GmbFXeiNNOYzbGQGDQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-02-27 17:24:13 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 12:24:08.446621 2025] [security2:error] [pid 2426104:tid 2426104] [client 31.7.62.57:56857] [client 31.7.62.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "expresstires.us"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Z8CfuLM_a-IbRLbWo9yv_QAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-02-27 16:34:43 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 11:34:39.827729 2025] [security2:error] [pid 9493:tid 9493] [client 31.7.62.57:35187] [client 31.7.62.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.flatchestedmama.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Z8CUHx4qu6W3YiEQEuKpFgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Mario Silber	2025-02-27 16:05:31 (1 month ago)	(mod_security) mod_security triggered on hostname [redacted] 31.7.62.57 (CH/Switzerland/hostedby.pri ... show more(mod_security) mod_security triggered on hostname [redacted] 31.7.62.57 (CH/Switzerland/hostedby.privatelayer.com) show less	SQL Injection
nextweb	2025-02-27 15:38:31 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (CH/Switzerland/Zurich/Zurich/hosted ... show more(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (CH/Switzerland/Zurich/Zurich/hostedby.privatelayer.com/[AS51852 Private Layer INC]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
taivas.nl	2025-02-27 15:02:13 (1 month ago)	Bad_requests	Bad Web Bot
Anonymous	2025-02-27 15:01:09 (1 month ago)	Open Source CMS Configuration File Requests	Hacking Brute-Force
TPI-Abuse	2025-02-27 14:12:27 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in th ... show more(mod_security) mod_security (id:210492) triggered by 31.7.62.57 (hostedby.privatelayer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 27 09:12:16.450955 2025] [security2:error] [pid 4426:tid 4449] [client 31.7.62.57:45075] [client 31.7.62.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rubenluis.com"] [uri "/wp-config.php-original"] [unique_id "Z8BywCIuBP6SHswd_v9FJAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack