🇺🇸
TPI-Abuse
2026-10-21 19:13:00
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:12:56.440274 2026] [security2:error] [pid 30857:tid 30857] [client 185.94.34.199:19025] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||elfinforest.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "elfinforest.net"] [uri "/featuring_elfin_forest.htm"] [unique_id "atkOuD35xSInAI9K-gf0iQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 03:19:48
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:19:43.253887 2026] [security2:error] [pid 21164:tid 21164] [client 185.94.34.199:43209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jrbentley.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jrbentley.com"] [uri "/models.html"] [unique_id "atgvT8FanU_1zUwBSsfJYgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:49:35
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:49:29.839538 2026] [security2:error] [pid 22501:tid 22501] [client 185.94.34.199:28101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blockadefoundationrepair.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blockadefoundationrepair.com"] [uri "/windowwell.html"] [unique_id "atDL2ZgV3hytEzMIFBJY2gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-17 16:42:05
(10 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-09-11 07:50:43
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 03:50:37.778979 2025] [security2:error] [pid 7271:tid 7271] [client 185.94.34.199:41083] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sierra-broadcasting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sierra-broadcasting.com"] [uri "/"] [unique_id "aMJ_TR-DuN-my6J03y1JCQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
essinghigh
2024-06-15 00:44:43
(2 years ago)
1718412282 # Service_probe # SIGNATURE_SEND # source_ip:185.94.34.199 # dst_port:4840
...
Port Scan
🇬🇧
essinghigh
2024-04-30 03:01:08
(2 years ago)
1714446067 # Service_probe # SIGNATURE_SEND # source_ip:185.94.34.199 # dst_port:8239
...
Port Scan
🇷🇴
abuse_IP_reporter
2023-04-08 18:28:00
(3 years ago)
More than 58 web attacks
DDoS Attack
🇷🇴
abuse_IP_reporter
2023-04-08 18:28:00
(3 years ago)
More than 58 web attacks
DDoS Attack