JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.5.123

31.134.5.123 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 19%: ?

19%

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇫🇮 Finland
City	Vantaa, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.5.123

Whois 31.134.5.123

IP Abuse Reports for 31.134.5.123:

This IP address has been reported a total of 10 times from 7 distinct sources. 31.134.5.123 was first reported on October 10th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 11:06:44 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:06:38.752707 2026] [security2:error] [pid 11931:tid 11931] [client 31.134.5.123:64183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abcollie.com"] [uri "/.wp-config.php.swp"] [unique_id "ahA4vq0anqIv0UGXsUOHtQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 18:30:46 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 14:30:37.592978 2026] [security2:error] [pid 26939:tid 26939] [client 31.134.5.123:11357] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kawkacevents.com"] [uri "/wp-config.txt"] [unique_id "ag39ze52aoPYA1Io5tIZCAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:57:08 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:57:01.743007 2026] [security2:error] [pid 7378:tid 7378] [client 31.134.5.123:22845] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonesband.com"] [uri "/wp-config.php.bak"] [unique_id "ag2vnXnndVho6jykhjQxDgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-16 18:57:09 (3 weeks ago)	31.134.5.123 - - [16/May/2026:20:57:02 +0200] "GET /wp-config.php.save HTTP/1.0" 404 182351 "-" "Moz ... show more 31.134.5.123 - - [16/May/2026:20:57:02 +0200] "GET /wp-config.php.save HTTP/1.0" 404 182351 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 31.134.5.123 - - [16/May/2026:20:57:02 +0200] "GET /wp-config.php.bak HTTP/1.0" 404 182350 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 31.134.5.123 - - [16/May/2026:20:57:04 +0200] "GET /wp-config.php~ HTTP/1.0" 404 182347 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 31.134.5.123 - - [16/May/2026:20:57:05 +0200] "GET /wp-config.php.txt HTTP/1.0" 404 182350 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 31.134.5.123 - - [16/May/2026:20:57:05 +0200] "GET /wp-config.php.old HTTP/1.0" 404 182350 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ... show less	Brute-Force Web App Attack
🇺🇸 floreriaexpress	2026-04-16 20:30:56 (1 month ago)	FakeADS-Anti: country:RU \| https://floreriaexpresschile.cl/wp-signup.php	Bad Web Bot
🇩🇪 LRob.fr	2026-04-15 07:45:03 (1 month ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇩🇪 paissangroup	2026-04-14 21:26:14 (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-11-17 16:50:33 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-02 00:05:05 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 31.134.5.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 20:04:57.328193 2025] [security2:error] [pid 31587:tid 31611] [client 31.134.5.123:37419] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cmykdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cmykdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQagKWH7mu2s8m4SlLssqgAAABY"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fbarela	2025-10-10 00:00:32 (8 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.74

🇧🇪 198.235.24.241

🇮🇳 125.21.59.218

🇮🇳 103.215.208.4

🇫🇷 82.65.208.213

🇷🇴 80.94.92.102

🇺🇸 69.171.230.141

🇳🇱 45.148.10.151

🇧🇪 34.14.23.32

🇫🇷 4.211.84.189

🇺🇸 205.210.31.88

🇺🇸 152.32.183.209

🇨🇳 121.43.117.214

🇺🇸 97.100.166.176

🇨🇦 85.217.149.70

🇩🇪 77.81.65.210

🇩🇪 69.5.169.53

🇨🇳 60.188.58.133

🇵🇪 190.119.63.98

🇨🇳 115.58.176.132