JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.13.97

31.134.13.97 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 23%: ?

23%

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇪🇪 Estonia
City	Tallinn, Harjumaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.13.97

Whois 31.134.13.97

IP Abuse Reports for 31.134.13.97:

This IP address has been reported a total of 21 times from 14 distinct sources. 31.134.13.97 was first reported on April 21st 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 Countryman	2026-09-14 00:10:01 (2 days ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 lp	2026-09-13 03:22:29 (3 days ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 31.134.13.97 2026-09-13T05:09:37+02:0 ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 31.134.13.97 2026-09-13T05:09:37+02:00 vpn Access-Reject 'Cbarrios' station: 31.134.13.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-13T05:11:13+02:00 vpn Access-Reject 'SArmando' station: 31.134.13.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-13T05:12:48+02:00 vpn Access-Reject 'Dcindy' station: 31.134.13.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇭 SOC [GOLINE SA]	2026-09-07 21:54:48 (1 week ago)	[RoutePulse \| 2026-09-07T21:54:48Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 31.134.13.9 ... show more [RoutePulse \| 2026-09-07T21:54:48Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 31.134.13.97 · AS43444 Fast Servers (Pty) Ltd · Seychelles EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — distributed attack (3 attempts/15min) — shun on the VPN gateway DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Brute-Force Hacking
🇩🇪 london2038.com	2026-06-08 22:11:26 (3 months ago)	Detected by WP fail2ban 2026-06-09T00:11:25.613336+02:00 wordpress: Authentication attempt from 31.1 ... show more Detected by WP fail2ban 2026-06-09T00:11:25.613336+02:00 wordpress: Authentication attempt from 31.134.13.97 show less	Brute-Force Web App Attack
🇩🇪 london2038.com	2026-03-31 10:03:35 (5 months ago)	Malformed or malicious web request 31.134.13.97 - - [31/Mar/2026:12:03:34 +0200] "POST /xmlrpc.php H ... show more Malformed or malicious web request 31.134.13.97 - - [31/Mar/2026:12:03:34 +0200] "POST /xmlrpc.php HTTP/1.1" 404 4187 "-" "AppleWebKit/539.39 (KHTML, like Gecko111)" show less	Hacking Web App Attack
🇩🇪 MusicLibrary	2026-03-23 23:19:10 (5 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇧🇪 voormedia	2026-03-20 22:25:35 (5 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-03-19 23:09:10 (5 months ago)	XML RPC Scan Activities: "2026-03-20T06:09:10.720+07:00" "/xmlrpc.php" "31.134.13.97" "Mozilla/5.0 ( ... show more XML RPC Scan Activities: "2026-03-20T06:09:10.720+07:00" "/xmlrpc.php" "31.134.13.97" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:144.0) Gecko/20100101 Firefox/144.0" show less	Web App Attack Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2026-03-17 08:43:48 (5 months ago)	XML RPC Scan Activities: "2026-03-17T15:43:48.636+07:00" "/xmlrpc.php" "31.134.13.97" "Mozilla/5.0 ( ... show more XML RPC Scan Activities: "2026-03-17T15:43:48.636+07:00" "/xmlrpc.php" "31.134.13.97" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:142.0) Gecko/20100101 Firefox/142.0" show less	Web App Attack Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2026-03-15 14:53:24 (6 months ago)	XML RPC Scan Activities: "2026-03-15T21:53:24.848+07:00" "/xmlrpc.php" "31.134.13.97" "Chrome/99.9 S ... show more XML RPC Scan Activities: "2026-03-15T21:53:24.848+07:00" "/xmlrpc.php" "31.134.13.97" "Chrome/99.9 Safari/539.59" show less	Web App Attack Brute-Force
🇩🇪 MusicLibrary	2026-03-09 12:35:48 (6 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇩🇪 MusicLibrary	2026-03-04 10:22:46 (6 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-01-28 07:01:35 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.28 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.28 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2026-01-26 17:02:09 (7 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇫🇷 masterguru	2025-12-23 10:59:56 (8 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.13.97 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.13.97 (FI/Finland/-): 1 in the last 3600 secs (0-193) show less	Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.221

🇧🇪 198.235.24.193

🇿🇦 102.212.64.41

🇿🇦 102.33.32.30

🇧🇷 45.179.101.86

🇺🇸 45.56.103.91

🇬🇧 5.226.140.22

🇦🇴 2c0f:f888:a180:7f65:687b:e7d8:e33a:f019

🇩🇪 213.209.159.175

🇬🇾 190.80.24.178

🇺🇸 172.217.115.4

🇹🇼 111.70.31.135

🇫🇷 104.238.188.88

🇳🇱 85.11.167.212

🇧🇬 79.124.62.126

🇨🇴 45.225.224.126

🇧🇪 34.79.124.11

🇵🇦 190.14.223.82

🇺🇸 172.190.89.127

🇨🇳 163.53.90.9