JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.3.252

31.134.3.252 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 7%: ?

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.3.252

Whois 31.134.3.252

IP Abuse Reports for 31.134.3.252:

This IP address has been reported a total of 14 times from 10 distinct sources. 31.134.3.252 was first reported on December 25th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-06 23:20:46 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-20.31.134.3.252.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-20.31.134.3.252.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-07-05 02:18:41 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-18.31.134.3.252.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-18.31.134.3.252.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 YF	2026-07-01 11:10:19 (1 month ago)	WordPress content enumeration	Web App Attack
🇱🇻 garmtech.com	2026-06-30 01:44:16 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-44.31.134.3.252.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-44.31.134.3.252.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-06-24 16:31:56 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-31.31.134.3.252.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-31.31.134.3.252.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-06-06 22:54:19 (2 months ago)	Forum/form spam	Web Spam
🇫🇷 mrcrassi	2026-03-17 03:11:00 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from FI. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: curl/8.6.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2026-02-15 07:10:15 (6 months ago)		Bad Web Bot
🇫🇷 Tilellit.PRO	2026-02-13 16:42:39 (6 months ago)	Fail2Ban banned 31.134.3.252 for security violations in jail wp-armour. Log: 2026/02/13 16:42:38 [er ... show more Fail2Ban banned 31.134.3.252 for security violations in jail wp-armour. Log: 2026/02/13 16:42:38 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 31.134.3.252 \| Target: wplogin" , client: 31.134.3.252, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 fbarela	2026-01-17 16:00:08 (7 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:08:33 (8 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.3.252 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.3.252 (FI/Finland/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇨🇭 backslash	2025-12-16 17:45:07 (8 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 15:42:40 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.3.252 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 31.134.3.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 10:42:36.715379 2025] [security2:error] [pid 18220:tid 18220] [client 31.134.3.252:27383] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|simia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "simia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aTmU7Nb1rgGk8bPbeadwaAAAABg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-25 15:29:46 (1 year ago)	Ports: 80,443; Direction: 1; Trigger: LF_CXS	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.160

🇲🇽 148.244.171.151

🇫🇷 91.231.89.115

🇨🇦 85.217.149.42

🇫🇷 85.217.140.31

🇳🇱 81.19.216.119

🇺🇸 72.253.251.7

🇺🇸 64.23.250.24

🇺🇸 34.122.157.8

🇺🇸 24.131.215.165

🇺🇸 216.180.246.227

🇺🇸 147.182.228.12

🇺🇸 2400:cb00:988:1000:e448:c09:8cd1:c468

🇮🇳 157.35.91.153

🇰🇷 125.138.166.217

🇨🇳 122.96.48.123

🇳🇱 91.92.42.227

🇧🇬 77.76.128.35

🇰🇷 58.224.62.29

🇹🇷 46.2.154.44