JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.134.7.174

31.134.7.174 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 3%: ?

ISP	Trade Commodity Firm Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Domain Name	traffictransitsolution.us
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.134.7.174

Whois 31.134.7.174

IP Abuse Reports for 31.134.7.174:

This IP address has been reported a total of 11 times from 9 distinct sources. 31.134.7.174 was first reported on November 29th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 JimArchon72	2026-08-15 00:40:02 (1 week ago)	2026/08/15 00:36:38 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇫🇮 JimArchon72	2026-07-15 23:50:02 (1 month ago)	2026/07/15 23:48:33 "GET /wp-login.php?action=register HTTP/1.1"	Web App Attack
🇺🇸 TPI-Abuse	2026-06-16 23:53:05 (2 months ago)	(mod_security) mod_security (id:210350) triggered by 31.134.7.174 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 31.134.7.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 19:52:58.823200 2026] [security2:error] [pid 14146:tid 14146] [client 31.134.7.174:37609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|millergrain.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "millergrain.com"] [uri "/"] [unique_id "ajHh2isLbq7JUVpbvySZowAAAA8"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-12 20:39:25 (5 months ago)	Forum/form spam	Web Spam
🇦🇺 oncord	2026-02-20 03:17:39 (6 months ago)	Form spam	Web Spam
🇫🇷 Tilellit.PRO	2026-02-13 19:06:43 (6 months ago)	Fail2Ban banned 31.134.7.174 for security violations in jail wp-armour. Log: 2026/02/13 19:06:42 [er ... show more Fail2Ban banned 31.134.7.174 for security violations in jail wp-armour. Log: 2026/02/13 19:06:42 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 31.134.7.174 \| Target: wplogin" , client: 31.134.7.174, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 TPI-Abuse	2026-02-03 07:54:52 (6 months ago)	(mod_security) mod_security (id:210350) triggered by 31.134.7.174 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 31.134.7.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 02:54:47.022097 2026] [security2:error] [pid 16055:tid 16055] [client 31.134.7.174:39477] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|okwellbeing.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "okwellbeing.com"] [uri "/"] [unique_id "aYGpx2k-5jpVssgZr6zyQAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-27 01:58:36 (6 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.27 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.27 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:00:36 (7 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.7.174 (FI/Finland/-): 1 in the last 360 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 31.134.7.174 (FI/Finland/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-10 14:34:54 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇭 backslash	2025-11-29 06:25:32 (8 months ago)		Bad Web Bot

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.66.166.30

🇺🇸 152.32.236.116

🇭🇺 79.139.58.121

🇺🇸 54.146.134.152

🇨🇳 42.227.125.3

🇨🇳 27.155.103.100

🇺🇸 23.94.155.94

🇨🇳 203.83.231.93

🇯🇵 139.162.75.45

🇻🇳 103.199.16.90

🇺🇸 48.47.9.232

🇲🇾 47.250.55.117

🇬🇧 154.56.238.16

🇨🇳 121.229.9.97

🇨🇳 112.32.241.230

🇫🇷 85.217.140.54

🇺🇸 66.132.224.227

🇸🇬 62.197.153.52

🇰🇷 43.155.188.157

🇯🇵 8.216.13.97