JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.12.166

31.134.12.166 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 35%: ?

35%

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.12.166

Whois 31.134.12.166

IP Abuse Reports for 31.134.12.166:

This IP address has been reported a total of 35 times from 18 distinct sources. 31.134.12.166 was first reported on October 3rd 2025, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Saec	2026-08-26 20:14:01 (9 hours ago)	Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)	Port Scan Web App Attack
🇨🇦 DRI	2026-08-26 02:22:50 (1 day ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇿 ptlab	2026-08-24 18:45:36 (2 days ago)	Detected wp_login attack from WP-host.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 00:44:32 (3 days ago)	(mod_security) mod_security (id:210350) triggered by 31.134.12.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 31.134.12.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 20:44:27.150737 2026] [security2:error] [pid 18794:tid 18794] [client 31.134.12.166:58999] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|gonzalez.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gonzalez.com"] [uri "/"] [unique_id "aouT61sxvPdiz-ehN459bAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 JimArchon72	2026-07-31 23:35:03 (3 weeks ago)	2026/07/31 23:34:22 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 02:35:38 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 31.134.12.166 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 31.134.12.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 22:35:31.773441 2026] [security2:error] [pid 1968951:tid 1968951] [client 31.134.12.166:59395] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Hansen II/Pampa Rouge/originals/Thumbs.db"] [unique_id "amF98xgDdZm86KLEZwHNtQAAABc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hansen%20II/Hansen%20II/Pampa%20Rouge/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-07-09 05:33:00 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 HandyTreff.de	2026-07-07 11:10:23 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.487 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -56.487 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2055.5 show less	Web App Attack Bad Web Bot
🇨🇭 backslash	2026-06-04 14:30:04 (2 months ago)		Bad Web Bot
🇦🇺 MAGIC	2026-05-19 01:17:28 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇹🇷 pamircil	2026-05-16 20:00:39 (3 months ago)	🍯 WinnieThePooh Honeypot : GET request to '/wp-config.php.1' on (http/80)💀	SSH Brute-Force Hacking
Anonymous	2026-05-09 20:09:17 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 polido	2026-05-09 06:44:45 (3 months ago)	Unauthorized connection attempt to port 443 from 31.134.12.166	Port Scan
🇩🇪 HandyTreff.de	2026-04-16 19:13:54 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.266 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -58.266 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1845.7 show less	Web App Attack Bad Web Bot
🇺🇸 nowyouknow	2025-12-13 11:17:38 (8 months ago)	(From [email protected]) Hi there, Full-time Digital Marketing Assistant for $250/mont ... show more (From [email protected]) Hi there, Full-time Digital Marketing Assistant for $250/month, first month free. Covers SEO, ads, email, social media, and daily marketing tasks. Fill out the form to get started. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLScsmwVSD25GyGWMF8FKKCLuTC8aW16o2XhzZrSKxxxA0NfoNw/viewform GLE Link to Google Forms: https://forms.gle/X876rDuMnKFkF4ScA Short link: https://bit.ly/AffordableVA show less	Phishing Web Spam

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.0.56.78

🇬🇧 216.226.76.10

🇧🇪 198.235.24.208

🇫🇷 172.69.222.96

🇭🇰 165.101.75.111

🇮🇳 124.123.125.62

🇨🇦 67.43.232.2

🇺🇸 66.132.224.233

🇬🇧 193.32.209.232

🇮🇳 190.92.174.185

🇨🇳 121.29.149.3

🇷🇴 92.118.39.77

🇺🇸 85.239.151.10

🇩🇪 69.5.169.211

🇺🇸 66.132.186.163

🇺🇸 64.62.156.180

🇺🇸 51.57.81.164

🇳🇱 45.156.128.106

🇧🇷 201.76.120.30

🇳🇱 185.223.235.54