AbuseIPDB » 31.134.5.74
31.134.5.74
This IP was reported 8 times. Confidence of
Abuse
is 13% : ?
ISP
Trade Commodity Firm Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS43444
Domain Name
traffictransitsolution.us
Country
🇫🇮
Finland
City
Vantaa, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 31.134.5.74 :
This IP address has been reported a total of
8
times from
5 distinct
sources.
31.134.5.74 was first reported on
February 10th 2026 , and the most recent report was
2 weeks ago
Old Reports:
The most recent abuse report for this IP address is from
2 weeks ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇪🇸
sshtmp
2026-05-21 15:48:17
(2 weeks ago)
[AbuseIPDB auto-report]
Attack: WordPress XML-RPC brute-force
Hits: 1 | First: 2026-05-21T17:48:17+0 ...
show more
[AbuseIPDB auto-report]
Attack: WordPress XML-RPC brute-force
Hits: 1 | First: 2026-05-21T17:48:17+02:00 | Last: 2026-05-21T17:48:17+02:00
Samples: POST /xmlrpc.php [200]
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 01:17:07
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 31.134.5.74 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.5.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 21:17:03.153410 2026] [security2:error] [pid 19356:tid 19356] [client 31.134.5.74:51899] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ryszardwycisk.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ryszardwycisk.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afKtjwCRFD8gPxMZbdW2UAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-04-28 13:35:13
(1 month ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-27 08:45:59
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 31.134.5.74 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.5.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 04:45:54.661659 2026] [security2:error] [pid 25722:tid 25722] [client 31.134.5.74:59039] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||expresstires.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "expresstires.us"] [uri "/wp-json/wp/v2/users"] [unique_id "ae8iQn5Abp5xzOu-Q727HAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 19:24:59
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 31.134.5.74 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 31.134.5.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 15:24:53.406989 2026] [security2:error] [pid 12332:tid 12332] [client 31.134.5.74:28781] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||qed-consulting.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "qed-consulting.co"] [uri "/wp-json/wp/v2/users"] [unique_id "aepyBdIAa1hhoKZoJkBKBgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
fbarela
2026-02-20 14:00:18
(3 months ago)
FortiGate SSL VPN login failures.
Brute-Force
Hacking
🇩🇪
barbarella
2026-02-11 08:12:17
(3 months ago)
Multiple (2) times attack on https port 443: Citrix NetScaler Gateway Cross site scripting CVE-2023- ...
show more
Multiple (2) times attack on https port 443: Citrix NetScaler Gateway Cross site scripting CVE-2023-24488 (GET /vpn/index.html)
08:12:17 Citrix NetScaler Gateway Cross site scripting CVE-2023-24488 (GET /vpn/index.html)
show less
Hacking
Web App Attack
🇩🇪
barbarella
2026-02-10 15:25:03
(3 months ago)
hacking attempt (POST /global-protect/login.esp)
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: