JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.15.230

31.134.15.230 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 16%: ?

16%

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.15.230

Whois 31.134.15.230

IP Abuse Reports for 31.134.15.230:

This IP address has been reported a total of 16 times from 12 distinct sources. 31.134.15.230 was first reported on October 14th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 HandyTreff.de	2026-06-06 13:18:37 (2 weeks ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.997 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -55.997 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2877.8 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-02 21:43:10 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 31.134.15.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 31.134.15.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:43:05.531717 2026] [security2:error] [pid 3779:tid 3779] [client 31.134.15.230:55909] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.oualierealty.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oualierealty.com"] [uri "/st-kitts-nevis-real-estate"] [unique_id "ah9OaXSlU_oB-vajcN_dKQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-20 09:57:04 (1 month ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-16 23:22:45 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 31.134.15.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 31.134.15.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 19:22:37.910534 2026] [security2:error] [pid 10656:tid 10656] [client 31.134.15.230:51017] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Catnapper/images/Searcy/Thumbs.db"] [unique_id "agj8PYN9KpBaGPc5En3oFgAAADE"], referer: https://vitalitywebb.com/backstore/Catnapper/images/Searcy/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-19 05:12:13 (2 months ago)		Bad Web Bot
🇪🇸 el-brujo	2026-03-30 20:56:12 (2 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:144.0) Gecko/20100101 Firefox/144.0 Action: managed_challenge Source: firewallManaged ASN Description: BNS-AS Country: FI Method: POST Timestamp: 2026-03-30T20:56:12Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 MusicLibrary	2026-03-25 19:51:03 (2 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-03-22 03:26:37 (3 months ago)	"POST /xmlrpc.php HTTP/1.1"	Hacking Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-03-17 20:46:16 (3 months ago)	XML RPC Scan Activities: "2026-03-18T03:46:16.189+07:00" "/xmlrpc.php" "31.134.15.230" "Mozilla/5.0 ... show more XML RPC Scan Activities: "2026-03-18T03:46:16.189+07:00" "/xmlrpc.php" "31.134.15.230" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:141.0) Gecko/20100101 Firefox/141.0" show less	Web App Attack Brute-Force
🇮🇩 BPS-StatisticsIndonesia	2026-03-15 16:38:36 (3 months ago)	XML RPC Scan Activities: "2026-03-15T23:38:36.694+07:00" "/xmlrpc.php" "31.134.15.230" "AppleWebKit/ ... show more XML RPC Scan Activities: "2026-03-15T23:38:36.694+07:00" "/xmlrpc.php" "31.134.15.230" "AppleWebKit/537.37 (KHTML, like Gecko111)" show less	Web App Attack Brute-Force
🇧🇾 lns.bz	2026-03-05 00:00:45 (3 months ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇫🇷 tilellit.pro	2026-02-12 00:10:41 (4 months ago)	Fail2Ban banned 31.134.15.230 for security violations in jail wp-armour. Log: 2026/02/12 00:10:40 [e ... show more Fail2Ban banned 31.134.15.230 for security violations in jail wp-armour. Log: 2026/02/12 00:10:40 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 31.134.15.230 \| Target: wplogin" , client: 31.134.15.230, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-02-03 07:36:45 (4 months ago)	(mod_security) mod_security (id:210350) triggered by 31.134.15.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 31.134.15.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 02:36:40.209879 2026] [security2:error] [pid 725:tid 725] [client 31.134.15.230:40611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|goodpage.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "goodpage.com"] [uri "/"] [unique_id "aYGliFujmgy5KjLdW7ExrAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-01 07:17:29 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.02.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.02.01 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:00:53 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.187.98.180

🇭🇰 152.32.239.122

🇸🇬 114.119.137.38

🇰🇿 95.163.145.235

🇷🇴 80.94.92.184

🇪🇸 212.104.181.64

🇨🇴 206.1.80.36

🇬🇧 193.163.125.28

🇧🇷 168.205.68.69

🇨🇳 116.62.202.119

🇵🇭 112.199.127.226

🇨🇳 110.84.205.198

🇬🇧 107.181.142.30

🇮🇩 103.216.106.162

🇸🇬 103.187.146.90

🇵🇰 103.186.77.91

🇨🇮 102.203.40.26

🇷🇺 94.233.89.145

🇳🇴 93.89.113.60

🇺🇿 84.54.72.80