JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.2.248

31.134.2.248 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.2.248

Whois 31.134.2.248

IP Abuse Reports for 31.134.2.248:

This IP address has been reported a total of 7 times from 5 distinct sources. 31.134.2.248 was first reported on March 9th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-01-13 05:45:24 (4 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.13 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.13 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:14:42 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.2.248 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.2.248 (FI/Finland/-): 1 in the last 3600 secs (0-197) show less	Hacking
Anonymous	2025-12-14 09:48:13 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.14 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2025-12-02 00:11:46 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 fbarela	2025-11-12 02:00:50 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-10-09 14:02:05 (7 months ago)	(mod_security) mod_security (id:210350) triggered by 31.134.2.248 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 31.134.2.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 09 10:02:00.675111 2025] [security2:error] [pid 2671:tid 2671] [client 31.134.2.248:46435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|summitartists.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "summitartists.com"] [uri "/"] [unique_id "aOfAWLoSaILOYNKptv3R0AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-09 11:08:42 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 31.134.2.248 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.134.2.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 07:08:35.048637 2025] [security2:error] [pid 19232:tid 19232] [client 31.134.2.248:15825] [client 31.134.2.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "compassionfatigue.org"] [uri "/app/config/.env"] [unique_id "Z812s2ktBJll6dJV4-AebAAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.178

🇧🇷 179.126.184.88

🇩🇪 69.5.169.56

🇩🇪 69.5.169.7

🇹🇭 61.91.32.138

🇭🇰 58.152.42.174

🇭🇰 45.142.154.87

🇨🇳 39.170.26.74

🇮🇪 20.190.159.131

🇰🇷 14.46.58.104

🇷🇴 2.57.121.25

🇫🇷 163.5.241.88

🇮🇩 119.47.90.19

🇨🇦 85.217.149.13

🇺🇸 68.69.164.124

🇮🇳 66.116.205.19

🇭🇰 47.239.49.115

🇱🇹 45.227.254.170

🇳🇱 45.148.10.152

🇻🇳 27.79.7.154