JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 31.148.134.58

31.148.134.58 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	PE Sukonnik Mukola Valeriyovuch
Usage Type	Fixed Line ISP
ASN	AS49491
Hostname(s)	vps3.ternet.com.ua
Domain Name	ternet.com.ua
Country	🇺🇦 Ukraine
City	Ternopil, Ternopil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 31.148.134.58

Whois 31.148.134.58

IP Abuse Reports for 31.148.134.58:

This IP address has been reported a total of 48 times from 34 distinct sources. 31.148.134.58 was first reported on December 25th 2020, and the most recent report was 26 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 13:38:11 (26 seconds ago)	(mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:38:04.244450 2026] [security2:error] [pid 30724:tid 30724] [client 31.148.134.58:48798] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|daebakdesign.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daebakdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGPPDd3V75Ti9PspMMpOwAAAAA"], referer: https://daebakdesign.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-28 13:34:28 (4 minutes ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users \| 2026-08-28 13:34 UTC show less	Hacking Web App Attack
Anonymous	2026-08-28 13:21:03 (17 minutes ago)	Web App Attack, Hacking	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 13:05:37 (33 minutes ago)	(mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:05:30.674504 2026] [security2:error] [pid 14275:tid 14275] [client 31.148.134.58:60790] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|aifactoid.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aifactoid.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGHmplMh8xa-4GC5ICQQgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-28 12:56:13 (42 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 ELYAZ	2026-08-28 12:53:42 (44 minutes ago)	(y3) Failed access -byebye- from 31.148.134.58 (UA/Ukraine/vps3.ternet.com.ua): (CF_ENABLE)	Hacking
Anonymous	2026-08-28 12:45:56 (52 minutes ago)	Web attack blocked by Wordfence on www.charlesquaedvlieg.nl (1 hit). Reported by CRMON.	Web App Attack
Anonymous	2026-08-28 12:45:09 (53 minutes ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇨🇭 4server	2026-08-28 12:42:39 (55 minutes ago)	[FriAug2814:42:34.4936202026][security2:error][pid1396747:tid1397217][client31.148.134.58:0]ModSecur ... show more [FriAug2814:42:34.4936202026][security2:error][pid1396747:tid1397217][client31.148.134.58:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"614\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"allegrafamiglia.ch\"][uri\"/xmlrpc.php\"][unique_id\"apGCOkNmhKqEZdAIHgYn9AAAAI8\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 12:42:00 (56 minutes ago)	(mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:41:56.142815 2026] [security2:error] [pid 20681:tid 20681] [client 31.148.134.58:59678] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tristarus.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tristarus.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGCFBbwnpzSecEbWPbeaQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-08-28 12:32:25 (1 hour ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇫🇮 YF	2026-08-28 12:30:40 (1 hour ago)	WordPress author enumeration	Web App Attack
🇳🇱 BlueWire Hosting	2026-08-28 12:27:09 (1 hour ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 12:23:57 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the la ... show more (mod_security) mod_security (id:225170) triggered by 31.148.134.58 (vps3.ternet.com.ua): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:23:52.100085 2026] [security2:error] [pid 6310:tid 6310] [client 31.148.134.58:57814] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nomorenicenice.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nomorenicenice.net"] [uri "/wp-json/wp/v2/users/me"] [unique_id "apF92LCS6OglfsEpDGDI5AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xxkodedxx	2026-08-28 12:12:11 (1 hour ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: UA / AS49491 PE Sukonnik Mukola Valeriyovuch Active: 12:11:24 UTC Volume: 1 HTTP req Probed: /?author=1 Status mix: 444×1 Vhost fishing: cards.zvxlabs.com UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 102.220.160.129

🇫🇷 2400:cb00:1036:1000:6551:145c:7362:61b0

🇺🇸 216.75.62.8

🇳🇱 192.253.248.251

🇳🇱 188.166.113.59

🇧🇷 179.157.146.183

🇭🇰 172.253.5.18

🇺🇸 167.172.217.169

🇨🇳 140.255.135.251

🇺🇸 67.210.235.94

🇺🇸 47.251.15.21

🇺🇸 47.88.90.156

🇧🇷 45.179.189.48

🇳🇱 45.148.10.240

🇳🇱 45.148.10.141

🇺🇸 40.124.179.91

🇬🇧 31.14.254.109

🇫🇷 217.113.196.143

🇬🇧 213.166.84.44

🇧🇷 191.183.36.220