JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.2.57

31.134.2.57 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 2%: ?

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.2.57

Whois 31.134.2.57

IP Abuse Reports for 31.134.2.57:

This IP address has been reported a total of 8 times from 8 distinct sources. 31.134.2.57 was first reported on April 19th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Jean Valjean	2026-07-16 18:27:27 (3 days ago)	Fail2ban Caboom : wp-login.php Bruteforce	Brute-Force Web App Attack
Anonymous	2026-05-13 22:48:33 (2 months ago)	Forum/form spam	Web Spam
🇮🇩 RasyiidWho	2026-02-10 03:16:41 (5 months ago)	ip112.20 . 31.134.2.57 - - [10/Feb/2026:10:16:40 +0700] "GET /wp-login.php HTTP/1.1" 404 548 "https: ... show more ip112.20 . 31.134.2.57 - - [10/Feb/2026:10:16:40 +0700] "GET /wp-login.php HTTP/1.1" 404 548 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	DDoS Attack Port Scan Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-08 23:22:38 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.2.57 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 31.134.2.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 18:22:33.421061 2026] [security2:error] [pid 29939:tid 29939] [client 31.134.2.57:40823] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|theproducers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theproducers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYkaudLxtBbL15BLsWykTgAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2026-01-28 11:09:59 (5 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/28/2026 11:09 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 n1ran	2025-07-25 00:00:00 (11 months ago)	Fortigate ssl vpn web portal attempt login with fake credentials	VPN IP Brute-Force
Anonymous	2025-07-24 12:19:00 (11 months ago)	Message meets Alert condition The following critical firewall event was detected: SSL VPN login fai ... show more Message meets Alert condition The following critical firewall event was detected: SSL VPN login fail. date=2025-07-23 time=19:51:32 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1753318292436916218 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=31.134.2.57 srccountry="United States" user="mlopez" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in" show less	VPN IP
🇩🇪 hbrks	2024-04-19 14:16:57 (2 years ago)	GET https://marche-be.com/login * statusCode: 503 * user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; ... show more GET https://marche-be.com/login * statusCode: 503 * user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 show less	Web Spam Hacking Bad Web Bot

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 175.30.48.218

🇩🇪 140.248.227.151

🇨🇳 123.160.233.204

🇰🇪 105.27.148.94

🇩🇪 69.5.169.241

🇺🇸 64.62.197.103

🇺🇸 54.86.59.155

🇺🇸 40.124.80.250

🇨🇳 39.153.247.75

🇬🇧 8.208.10.94

🇩🇪 217.154.77.185

🇺🇸 192.161.49.2

🇬🇧 185.216.145.166

🇷🇺 178.66.188.148

🇺🇸 52.205.113.104

🇦🇺 45.132.224.119

🇬🇧 5.226.140.78

🇹🇷 5.175.136.100

🇩🇪 5.83.129.153

🇰🇪 197.232.147.251