JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.11.253

31.134.11.253 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 13%: ?

13%

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.11.253

Whois 31.134.11.253

IP Abuse Reports for 31.134.11.253:

This IP address has been reported a total of 20 times from 11 distinct sources. 31.134.11.253 was first reported on September 29th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-08-27 09:04:55 (1 day ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇫🇮 JimArchon72	2026-08-18 01:20:02 (1 week ago)	2026/08/18 01:15:55 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇫🇮 JimArchon72	2026-08-06 18:25:02 (3 weeks ago)	2026/08/06 18:24:19 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇬🇧 relianoid.com	2026-05-10 03:51:23 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2026-03-14 12:40:49 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 08:40:43.489431 2026] [security2:error] [pid 20346:tid 20346] [client 31.134.11.253:54165] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Power Chairs/Alante/Thumbs.db"] [unique_id "abVXS-hIrX9RUjFTDifMewAAAAA"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Power%20Chairs/Alante/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-03-14 07:24:05 (5 months ago)		Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-26 15:41:40 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 10:41:35.557601 2026] [security2:error] [pid 930:tid 930] [client 31.134.11.253:47563] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|genevaatlantic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "genevaatlantic.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaBpr2NWSjS0APAgLkBbAgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-24 20:42:14 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 15:42:09.803540 2026] [security2:error] [pid 19842:tid 19842] [client 31.134.11.253:31851] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alfredintelligence.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alfredintelligence.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ4NIfVvFvYl_Lda-qc7aAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 05:27:14 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 31.134.11.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 00:27:09.715911 2026] [security2:error] [pid 8956:tid 8956] [client 31.134.11.253:17309] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|savingspools.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "savingspools.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZlCLT3TxxtAJaUNBdXHzwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Tilellit.PRO	2026-02-15 10:21:30 (6 months ago)	Fail2Ban banned 31.134.11.253 for security violations in jail wp-armour. Log: 2026/02/15 10:21:29 [e ... show more Fail2Ban banned 31.134.11.253 for security violations in jail wp-armour. Log: 2026/02/15 10:21:29 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 31.134.11.253 \| Target: wplogin" , client: 31.134.11.253, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 mind5t0rm	2026-02-05 12:50:06 (6 months ago)	(XMLRPC) WP XMLPRC Attack 31.134.11.253 (SC/Seychelles/-): 3 in the last 3600 secs; Ports: ; Direct ... show more (XMLRPC) WP XMLPRC Attack 31.134.11.253 (SC/Seychelles/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 31.134.11.253 - - [05/Feb/2026:19:49:46 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" 31.134.11.253 - - [05/Feb/2026:19:50:01 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" 31.134.11.253 - - [05/Feb/2026:19:50:01 +0700] "POST /xmlrpc.php HTTP/2.0" 403 154 "-" "curl/7.88.1" show less	Port Scan
🇺🇸 agenciahypelab.com.br	2026-02-03 23:44:01 (6 months ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
Anonymous	2026-01-28 10:53:28 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.28 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.28 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2026-01-13 01:15:34 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.13 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-27 06:21:05 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.27 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.27 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇨 202.22.238.10

🇳🇱 91.92.40.188

🇺🇸 65.49.1.159

🇵🇭 49.150.75.198

🇸🇬 45.194.22.76

🇩🇴 45.172.152.74

🇨🇦 20.104.50.220

🇧🇩 2a09:bac5:484:137d::1f1:1f2

🇵🇾 181.124.113.251

🇺🇸 172.252.13.101

🇺🇸 147.185.132.81

🇮🇳 122.160.137.230

🇨🇳 116.179.37.253

🇧🇷 45.205.1.131

🇺🇸 45.194.67.46

🇳🇱 45.154.98.128

🇬🇧 35.203.210.71

🇰🇷 1.227.228.131

🇪🇬 197.49.20.161

🇨🇳 123.12.224.113