Total reports
7 from
3 distinct
reporters
First reported
June 12th 2025
Most recent report
1 day ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
Most common categories
Bad Web Bot
4
Brute-Force
4
Web App Attack
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-11 08:17:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:17:31.190517 2026] [security2:error] [pid 2711458:tid 2711466] [client 31.134.6.77:32177] M ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:17:31.190517 2026] [security2:error] [pid 2711458:tid 2711466] [client 31.134.6.77:32177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.baronlongford.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.baronlongford.com"] [uri "/Baron-Moyashel.html"] [unique_id "avQkm1XAkMAH0pWOP2qE8gAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:12:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:12:50.215781 2026] [security2:error] [pid 11282:tid 11282] [client 31.134.6.77:29377] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:12:50.215781 2026] [security2:error] [pid 11282:tid 11282] [client 31.134.6.77:29377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.windisfun.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.windisfun.com"] [uri "/about.html"] [unique_id "aumJchbZ16kazjkBSDYF4AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 09:11:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:11:24.104742 2026] [security2:error] [pid 10392:tid 10392] [client 31.134.6.77:17121] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:11:24.104742 2026] [security2:error] [pid 10392:tid 10392] [client 31.134.6.77:17121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lbgeeks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lbgeeks.com"] [uri "/sdt/"] [unique_id "atx2PKfiJoUZ6iBOoV8xOQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 19:52:16
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:52:11.997026 2026] [security2:error] [pid 30828:tid 30828] [client 31.134.6.77:14819] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.6.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:52:11.997026 2026] [security2:error] [pid 30828:tid 30828] [client 31.134.6.77:14819] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||evolute.io|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "evolute.io"] [uri "/about-us.html"] [unique_id "atu66z1eDFTglH9j9gh9lAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-14 07:21:11
UTC ·
(7 months ago)
Bad Web Bot
🇨🇭
backslash
2026-01-08 15:18:28
UTC ·
(10 months ago)
Bad Web Bot
2025-06-12 10:56:00
UTC ·
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-11 time=19:52:47 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1749689567656479671 tz="-0500" logid="0101039426" type="even ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-11 time=19:52:47 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1749689567656479671 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=31.134.6.77 srccountry="United States" user="djohnson" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
