Total reports
6 from
3 distinct
reporters
First reported
May 18th 2026
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
Most common categories
Bad Web Bot
4
Brute-Force
4
Web App Attack
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-10 08:38:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:38:10.385051 2026] [security2:error] [pid 21995:tid 21995] [client 31.134.6.25:48223] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 03:38:10.385051 2026] [security2:error] [pid 21995:tid 21995] [client 31.134.6.25:48223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/d01f9bc2626a96a38625699900786730/f346a64ab2ffada58625645200830cff_7b4ad6db.html"] [unique_id "avLX8lDIhdZ7gM8wLO8C9AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 22:44:48
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:44:41.877485 2026] [security2:error] [pid 13851:tid 13851] [client 31.134.6.25:15201] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:44:41.877485 2026] [security2:error] [pid 13851:tid 13851] [client 31.134.6.25:15201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/hin/rz.html"] [unique_id "au5YWe1JTDi9CzCTdjrM_gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:55:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:55:38.091665 2026] [security2:error] [pid 19359:tid 19359] [client 31.134.6.25:36919] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:55:38.091665 2026] [security2:error] [pid 19359:tid 19359] [client 31.134.6.25:36919] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/bonfire.html"] [unique_id "au4GiuvQRlbzilZxSI2RbAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 20:20:14
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:20:11.466798 2026] [security2:error] [pid 15433:tid 15433] [client 31.134.6.25:56415] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:20:11.466798 2026] [security2:error] [pid 15433:tid 15433] [client 31.134.6.25:56415] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||indyham.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "indyham.com"] [uri "/news/k3htk-repeater-noblesville-in-443-625-power-problem/"] [unique_id "auzk-5gJFdEsuh2H8kUOWgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-09-05 21:17:54
UTC ·
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
agenciahypelab.com.br
2026-05-18 14:16:26
UTC ·
(5 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
