AbuseIPDB » 64.137.31.109
64.137.31.109
This IP was reported 8 times. Confidence of
Abuse
is 0% : ?
ISP
FASTPLANET LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS329225
Domain Name
fastplanet.com
Country
🇿🇦
South Africa
City
Johannesburg, Gauteng
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 64.137.31.109 :
This IP address has been reported a total of
8
times from
4 distinct
sources.
64.137.31.109 was first reported on
October 30th 2023 , and the most recent report was
7 months ago
Old Reports:
The most recent abuse report for this IP address is from
7 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2025-12-29 17:18:55
(7 months ago)
(mod_security) mod_security (id:212880) triggered by 64.137.31.109 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212880) triggered by 64.137.31.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 12:12:15.895595 2025] [security2:error] [pid 23516:tid 23596] [client 64.137.31.109:46381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:<style.{0,399}?>.{0,399}?(?:@[i\\\\\\\\]|(?:[:=]|&#x?0*(?:58|3A|61|3D);?).{0,399}?(?:[(\\\\\\\\]|&#x?0*(?:40|28|92|5C);?)))" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "95"] [id "212880"] [rev "4"] [msg "COMODO WAF: IE XSS Filters - Attack Detected.||kettlehill.kettlehill.com|F|2"] [data "Matched Data: 64.137.31.109 found within MATCHED_VAR: <style><j:jelly xmlns:j=\\x22jelly\\x22 xmlns:g='glide'><g:evaluate>gs.adderrormessage(1337*1337);</g:evaluate></j:jelly></style>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "kettlehill.kettlehill.com"] [uri "/login.do"] [unique_id "aVK2bwtJvz4KODtZUgY9dgAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-13 09:45:00
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 64.137.31.109 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.137.31.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 04:44:50.532852 2025] [security2:error] [pid 21829:tid 21829] [client 64.137.31.109:45655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/.env.backup"] [unique_id "aRWokoPn7SETLA6T1uMlowAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dayda.net
2025-10-13 03:23:37
(10 months ago)
query: q=file:///etc/passwd
Bad Web Bot
2025-10-10 18:00:11
(10 months ago)
| Shellshock attack attempt
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-08-31 03:17:50
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 64.137.31.109 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.137.31.109 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 23:17:44.114844 2025] [security2:error] [pid 2797787:tid 2797807] [client 64.137.31.109:59843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.kettlehill.com"] [uri "/.env"] [unique_id "aLO-2PC0t62R7dFmgHgVgQAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-11-06 02:55:14
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-11-02 02:20:04
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:227
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-30 20:56:13
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: