JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.239.31.42

87.239.31.42 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	INETCOM CARRIER LLC
Usage Type	Fixed Line ISP
ASN	AS35598
Hostname(s)	87.239.31.42.inetcom.ru
Domain Name	inetcom.ru
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.239.31.42

Whois 87.239.31.42

IP Abuse Reports for 87.239.31.42:

This IP address has been reported a total of 31 times from 9 distinct sources. 87.239.31.42 was first reported on November 13th 2021, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-02-18 07:30:40 (6 months ago)	530 requests with url.path *.env	Brute-Force Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-01-16 22:59:19 (7 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-01-15. show less	Hacking Web App Attack SSH
🇳🇱 homeshowdomain.nl	2026-01-15 23:00:17 (8 months ago)	Auto-ban: >3000 req/min op 2026-01-15	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-01-15 20:06:17 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 15:06:12.372937 2026] [security2:error] [pid 17982:tid 17982] [client 87.239.31.42:45654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.electric-cosmos.com"] [uri "/var/www/.htaccess"] [unique_id "aWlItGhus5pTNDWYLmqB7QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 11:08:15 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 06:08:09.932769 2026] [security2:error] [pid 21487:tid 21599] [client 87.239.31.42:45008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jessewallaceart.aussiepens.com"] [uri "/.git/config"] [unique_id "aWjKmfyi5jJ3INs-GBIgMQAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 10:09:17 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 05:09:10.727370 2026] [security2:error] [pid 2032042:tid 2032129] [client 87.239.31.42:60982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.itsnotjustmeisit.com.teritemme.com"] [uri "/.git/config"] [unique_id "aWi8xvOK0_wbTjQA_zP3VAAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 02:59:00 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 21:58:56.015985 2026] [security2:error] [pid 306:tid 306] [client 87.239.31.42:49122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kelting.net"] [uri "/.git/config"] [unique_id "aWhX8BbxgEKZzNPibZvE6wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-15 02:40:04 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 21:39:56.567760 2026] [security2:error] [pid 28012:tid 28012] [client 87.239.31.42:58346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kathiepontinen.com"] [uri "/.git/config"] [unique_id "aWhTfMDYkddFKDdjyKzprwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-14 19:56:47 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in th ... show more (mod_security) mod_security (id:210492) triggered by 87.239.31.42 (87.239.31.42.inetcom.ru): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 14:56:41.207498 2026] [security2:error] [pid 20201:tid 20201] [client 87.239.31.42:42514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saimedo.com"] [uri "/.git/config"] [unique_id "aWf0-VPbUnZvvdpF4UfFBQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 RyoKN	2025-11-21 00:28:09 (9 months ago)	Blocked by UFW on s474 [33556/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [33556/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-11-20 12:06:11 (9 months ago)	Blocked by UFW on s474 [47302/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [47302/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-11-19 21:54:57 (9 months ago)	Blocked by UFW on s474 [39590/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [39590/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-11-19 08:15:57 (9 months ago)	Blocked by UFW on s474 [46112/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [46112/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-11-18 18:15:11 (9 months ago)	Blocked by UFW on s474 [53598/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [53598/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-11-18 06:12:31 (9 months ago)	Blocked by UFW on s474 [45390/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on s474 [45390/tcp] Source port: 80 TTL: 59 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 191.103.49.10

🇦🇷 186.22.19.184

🇮🇩 163.7.11.155

🇺🇸 162.216.149.8

🇨🇳 150.158.30.141

🇺🇸 147.185.132.156

🇫🇷 91.231.89.131

🇺🇸 74.82.47.17

🇳🇱 45.148.10.151

🇻🇪 38.150.94.73

🇩🇪 35.242.193.199

🇬🇧 35.203.211.176

🇨🇱 34.176.118.22

🇺🇸 20.169.85.57

🇺🇸 13.90.206.6

🇮🇹 195.231.9.27

🇸🇪 193.235.141.177

🇺🇸 172.172.161.215

🇻🇳 118.69.186.1

🇺🇸 104.28.169.56