๐บ๐ธ
35.190.164.228
41 minutes ago
(mod_security) mod_security (id:911100) triggered by 35.190.164.228 (US/United States/228.164.190.35 ...
show more
(mod_security) mod_security (id:911100) triggered by 35.190.164.228 (US/United States/228.164.190.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 21:04:43.124195 2026] [security2:error] [pid 2515751:tid 2515859] [client 35.190.164.228:54806] ModSecurity: Access denied with code 406 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/etc/modsecurity.d/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/METHOD-ENFORCEMENT"] [tag "capec/1000/210/272/220/274"] [redacted] [uri "/"] [unique_id "atqyq14TXv24ttxKJcODAQAAAFk"]
show less
Port Scan
๐บ๐ธ
43.135.144.81
1 hour ago
(mod_security) mod_security (id:920210) triggered by 43.135.144.81 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 43.135.144.81 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 20:12:55.861448 2026] [security2:error] [pid 2515751:tid 2515856] [client 43.135.144.81:49436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atqmh14TXv24ttxKJcN8xgAAAFY"]
show less
Port Scan
๐ซ๐ท
91.196.152.215
1 hour ago
(mod_security) mod_security (id:920350) triggered by 91.196.152.215 (FR/France/armaan.probe.onyphe.n ...
show more
(mod_security) mod_security (id:920350) triggered by 91.196.152.215 (FR/France/armaan.probe.onyphe.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 19:46:26.625602 2026] [security2:error] [pid 2515751:tid 2515885] [client 91.196.152.215:56231] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atqgUl4TXv24ttxKJcN53QAAAHM"]
show less
Port Scan
๐บ๐ธ
66.249.74.78
3 hours ago
(mod_security) mod_security (id:920350) triggered by 66.249.74.78 (US/United States/crawl-66-249-74- ...
show more
(mod_security) mod_security (id:920350) triggered by 66.249.74.78 (US/United States/crawl-66-249-74-78.googlebot.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 18:42:17.538537 2026] [security2:error] [pid 2515751:tid 2515856] [client 66.249.74.78:37601] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/robots.txt"] [unique_id "atqRSV4TXv24ttxKJcNx9gAAAFY"]
show less
Port Scan
๐ณ๐ฑ
185.136.15.9
3 hours ago
(mod_security) mod_security (id:920350) triggered by 185.136.15.9 (KZ/Kazakhstan/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:920350) triggered by 185.136.15.9 (KZ/Kazakhstan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 17:53:44.422396 2026] [security2:error] [pid 2515751:tid 2515858] [client 185.136.15.9:58734] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atqF6F4TXv24ttxKJcNrogAAAFg"]
show less
Port Scan
๐ฎ๐ณ
64.227.150.86
4 hours ago
(mod_security) mod_security (id:913100) triggered by 64.227.150.86 (IN/India/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:913100) triggered by 64.227.150.86 (IN/India/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 17:41:29.618259 2026] [security2:error] [pid 2515751:tid 2515858] [client 64.227.150.86:33980] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "atqDCV4TXv24ttxKJcNqWQAAAFg"]
show less
Port Scan
๐ณ๐ฑ
185.136.15.111
4 hours ago
(sshd) Failed SSH login from 185.136.15.111 (KZ/Kazakhstan/-): 1 in the last 3600 secs; Ports: *; Di ...
show more
(sshd) Failed SSH login from 185.136.15.111 (KZ/Kazakhstan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 22 17:23:01 web sshd[2873024]: Invalid user Root from 185.136.15.111 port 30104
show less
Port Scan
๐ท๐บ
152.32.176.68
5 hours ago
(eximsyntax) Exim syntax errors from 152.32.176.68 (RU/Russia/-): 1 in the last 3600 secs; Ports: *; ...
show more
(eximsyntax) Exim syntax errors from 152.32.176.68 (RU/Russia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-10-22 16:31:55 SMTP call from [152.32.176.68] dropped: too many syntax or protocol errors (last command was "ร\024?ย?ย?/?5ร\022\023\003\023\001\023\002\001??{?\005?\005\001?????", NULL)
show less
Port Scan
๐ธ๐ช
141.98.255.130
5 hours ago
(mod_security) mod_security (id:920350) triggered by 141.98.255.130 (SE/Sweden/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 141.98.255.130 (SE/Sweden/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 16:22:19.007079 2026] [security2:error] [pid 2515751:tid 2515878] [client 141.98.255.130:38686] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpwe14TXv24ttxKJcNhJgAAAGw"]
show less
Port Scan
๐ง๐ช
34.77.179.186
5 hours ago
(mod_security) mod_security (id:920350) triggered by 34.77.179.186 (BE/Belgium/186.179.77.34.bc.goog ...
show more
(mod_security) mod_security (id:920350) triggered by 34.77.179.186 (BE/Belgium/186.179.77.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 16:21:05.888824 2026] [security2:error] [pid 2515751:tid 2515895] [client 34.77.179.186:50888] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpwMV4TXv24ttxKJcNg_gAAAH0"]
show less
Port Scan
๐บ๐ธ
49.51.39.209
5 hours ago
(mod_security) mod_security (id:920210) triggered by 49.51.39.209 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:920210) triggered by 49.51.39.209 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:59:39.348992 2026] [security2:error] [pid 835595:tid 835730] [client 49.51.39.209:46802] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atprKyW0PG_aDcAdfnHpjQAAADQ"]
show less
Port Scan
๐ฌ๐ง
5.226.140.31
5 hours ago
(mod_security) mod_security (id:920350) triggered by 5.226.140.31 (GB/United Kingdom/5-226-140-31.in ...
show more
(mod_security) mod_security (id:920350) triggered by 5.226.140.31 (GB/United Kingdom/5-226-140-31.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:10.126814 2026] [security2:error] [pid 835595:tid 835723] [client 5.226.140.31:1144] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpoPiW0PG_aDcAdfnHoRQAAAC0"]
show less
Port Scan
๐ฌ๐ง
89.37.172.138
5 hours ago
(mod_security) mod_security (id:920350) triggered by 89.37.172.138 (GB/United Kingdom/89-37-172-138. ...
show more
(mod_security) mod_security (id:920350) triggered by 89.37.172.138 (GB/United Kingdom/89-37-172-138.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:10.267698 2026] [security2:error] [pid 835595:tid 835689] [client 89.37.172.138:14298] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/sse"] [unique_id "atpoPiW0PG_aDcAdfnHoSQAAAAs"]
show less
Port Scan
๐ฌ๐ง
89.37.172.143
5 hours ago
(mod_security) mod_security (id:920350) triggered by 89.37.172.143 (GB/United Kingdom/89-37-172-143. ...
show more
(mod_security) mod_security (id:920350) triggered by 89.37.172.143 (GB/United Kingdom/89-37-172-143.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:10.126221 2026] [security2:error] [pid 835595:tid 835707] [client 89.37.172.143:8360] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "atpoPiW0PG_aDcAdfnHoRgAAAB0"]
show less
Port Scan
๐ฌ๐ง
188.240.59.18
5 hours ago
(mod_security) mod_security (id:920350) triggered by 188.240.59.18 (GB/United Kingdom/188-240-59-18. ...
show more
(mod_security) mod_security (id:920350) triggered by 188.240.59.18 (GB/United Kingdom/188-240-59-18.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:09.981992 2026] [security2:error] [pid 835595:tid 835688] [client 188.240.59.18:14472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "atpoPSW0PG_aDcAdfnHoRAAAAAo"]
show less
Port Scan
๐ฌ๐ง
188.240.59.20
5 hours ago
(mod_security) mod_security (id:920350) triggered by 188.240.59.20 (GB/United Kingdom/188-240-59-20. ...
show more
(mod_security) mod_security (id:920350) triggered by 188.240.59.20 (GB/United Kingdom/188-240-59-20.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:10.126280 2026] [security2:error] [pid 835595:tid 835729] [client 188.240.59.20:6414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/api/mcp"] [unique_id "atpoPiW0PG_aDcAdfnHoRwAAADM"]
show less
Port Scan
๐ฌ๐ง
195.206.182.199
5 hours ago
(mod_security) mod_security (id:920350) triggered by 195.206.182.199 (GB/United Kingdom/195-206-182- ...
show more
(mod_security) mod_security (id:920350) triggered by 195.206.182.199 (GB/United Kingdom/195-206-182-199.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:10.126785 2026] [security2:error] [pid 835595:tid 835707] [client 195.206.182.199:3562] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "atpoPiW0PG_aDcAdfnHoSAAAAB0"]
show less
Port Scan
๐ฌ๐ง
195.206.182.206
5 hours ago
(mod_security) mod_security (id:920350) triggered by 195.206.182.206 (GB/United Kingdom/195-206-182- ...
show more
(mod_security) mod_security (id:920350) triggered by 195.206.182.206 (GB/United Kingdom/195-206-182-206.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:09.840804 2026] [security2:error] [pid 835595:tid 835682] [client 195.206.182.206:13008] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpoPSW0PG_aDcAdfnHoQwAAAAQ"]
show less
Port Scan
๐ฌ๐ง
5.226.140.106
5 hours ago
(mod_security) mod_security (id:920350) triggered by 5.226.140.106 (GB/United Kingdom/5-226-140-106. ...
show more
(mod_security) mod_security (id:920350) triggered by 5.226.140.106 (GB/United Kingdom/5-226-140-106.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:47:02.500073 2026] [security2:error] [pid 835595:tid 835690] [client 5.226.140.106:52687] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpoNiW0PG_aDcAdfnHoPgAAAAw"]
show less
Port Scan
๐ง๐ช
35.195.42.59
6 hours ago
(ftpd) Failed FTP login from 35.195.42.59 (BE/Belgium/59.42.195.35.bc.googleusercontent.com): 1 in t ...
show more
(ftpd) Failed FTP login from 35.195.42.59 (BE/Belgium/59.42.195.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 22 15:46:18 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
๐ง๐ช
198.235.24.185
6 hours ago
(mod_security) mod_security (id:920280) triggered by 198.235.24.185 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920280) triggered by 198.235.24.185 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:38:18.146401 2026] [security2:error] [pid 835595:tid 835724] [client 198.235.24.185:49452] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpmKiW0PG_aDcAdfnHnYwAAAC4"]
show less
Port Scan
๐บ๐ธ
45.156.129.130
6 hours ago
(mod_security) mod_security (id:920350) triggered by 45.156.129.130 (US/United States/sh-chi-us-gd10 ...
show more
(mod_security) mod_security (id:920350) triggered by 45.156.129.130 (US/United States/sh-chi-us-gd10-wk101b.internet-census.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:28:35.504878 2026] [security2:error] [pid 835595:tid 835705] [client 45.156.129.130:36846] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpj4yW0PG_aDcAdfnHmXgAAABs"]
show less
Port Scan
๐ณ๐ฑ
68.183.7.216
6 hours ago
(mod_security) mod_security (id:920350) triggered by 68.183.7.216 (NL/The Netherlands/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 68.183.7.216 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 15:22:54.626842 2026] [security2:error] [pid 835595:tid 835693] [client 68.183.7.216:60316] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.git/config"] [unique_id "atpijiW0PG_aDcAdfnHlxAAAAA8"]
show less
Port Scan
๐ณ๐ฌ
152.32.142.138
7 hours ago
(mod_security) mod_security (id:920350) triggered by 152.32.142.138 (NG/Nigeria/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 152.32.142.138 (NG/Nigeria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 14:28:26.799149 2026] [security2:error] [pid 835595:tid 835707] [client 152.32.142.138:49018] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpVyiW0PG_aDcAdfnHfIAAAAB0"]
show less
Port Scan
๐ซ๐ท
79.143.187.206
7 hours ago
(mod_security) mod_security (id:920350) triggered by 79.143.187.206 (GB/United Kingdom/vmi3256852.co ...
show more
(mod_security) mod_security (id:920350) triggered by 79.143.187.206 (GB/United Kingdom/vmi3256852.contaboserver.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 22 14:06:03.786403 2026] [security2:error] [pid 835595:tid 835684] [client 79.143.187.206:37080] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atpQiyW0PG_aDcAdfnHc1wAAAAY"]
show less
Port Scan