|
🇺🇸
45.156.129.48
|
|
(mod_security) mod_security (id:920350) triggered by 45.156.129.48 (US/United States/sh-chi-us-gd15- ...
show more
(mod_security) mod_security (id:920350) triggered by 45.156.129.48 (US/United States/sh-chi-us-gd15-wk103a.internet-census.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 14:53:52.905313 2026] [security2:error] [pid 3907484:tid 3907563] [client 45.156.129.48:39532] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atutQP8Qwfh1y36npYOuAgAAAEM"]
show less
|
Port Scan
|
|
🇳🇱
178.16.54.144
|
|
(eximsyntax) Exim syntax errors from 178.16.54.144 (NL/The Netherlands/-): 1 in the last 3600 secs; ...
show more
(eximsyntax) Exim syntax errors from 178.16.54.144 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-10-23 14:21:37 SMTP call from [178.16.54.144] dropped: too many syntax or protocol errors (last command was "\021ì?\035?\027?\030?\031?\r?\026?\024\b\004\004\003\b\007\b\005\b\006\004\001\005\001\006\001\005\003\006\003?2?\032?\030\b\004\004\003\b\007\b\005\b\006\004\001\005\001\006\001\005\003\006\003\002\001\002\003?+?\005\004\003\004\003\003?3\004ê\004è\021ì\004À%ÚÇNñ\024G¿ã'|VÛy©ÈB\021í\f\034.¡çg#ÁG\004¼*\036´EºV\002\0356¶é·tè|\033\t÷\fñb¦h(ãç'vW\024p$ô¯ÿÓ\017÷ÂÊç<o¤¿î²¦\br *F¶ýÃ{~", NULL)
show less
|
Port Scan
|
|
🇧🇪
34.38.190.31
|
|
(mod_security) mod_security (id:920350) triggered by 34.38.190.31 (BE/Belgium/31.190.38.34.bc.google ...
show more
(mod_security) mod_security (id:920350) triggered by 34.38.190.31 (BE/Belgium/31.190.38.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 14:16:49.354860 2026] [security2:error] [pid 3820339:tid 3820454] [client 34.38.190.31:48326] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atukkcONfovfgSti4QoI4AAAACA"]
show less
|
Port Scan
|
|
🇺🇸
172.236.228.218
|
|
(mod_security) mod_security (id:920350) triggered by 172.236.228.218 (US/United States/172-236-228-2 ...
show more
(mod_security) mod_security (id:920350) triggered by 172.236.228.218 (US/United States/172-236-228-218.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 13:47:14.306671 2026] [security2:error] [pid 3820339:tid 3820443] [client 172.236.228.218:20286] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atudosONfovfgSti4QoHcAAAABU"]
show less
|
Port Scan
|
|
🇺🇸
20.120.164.98
|
|
(mod_security) mod_security (id:920350) triggered by 20.120.164.98 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 20.120.164.98 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 13:45:40.490677 2026] [security2:error] [pid 3820339:tid 3820484] [client 20.120.164.98:43968] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atudRMONfovfgSti4QoHXwAAAD4"]
show less
|
Port Scan
|
|
🇬🇧
144.126.233.150
|
|
(mod_security) mod_security (id:920350) triggered by 144.126.233.150 (GB/United Kingdom/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 144.126.233.150 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 13:30:19.937867 2026] [security2:error] [pid 3907484:tid 3907582] [client 144.126.233.150:37892] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.git/config"] [unique_id "atuZq_8Qwfh1y36npYOpOwAAAFY"]
show less
|
Port Scan
|
|
🇺🇸
43.166.244.66
|
|
(mod_security) mod_security (id:920210) triggered by 43.166.244.66 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 43.166.244.66 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 13:13:03.342028 2026] [security2:error] [pid 3907484:tid 3907615] [client 43.166.244.66:43016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atuVn_8Qwfh1y36npYOoFQAAAHc"]
show less
|
Port Scan
|
|
🇨🇳
113.86.47.83
|
|
(mod_security) mod_security (id:920350) triggered by 113.86.47.83 (CN/China/-): 1 in the last 3600 s ...
show more
(mod_security) mod_security (id:920350) triggered by 113.86.47.83 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 13:11:24.766992 2026] [security2:error] [pid 3820339:tid 3820474] [client 113.86.47.83:43369] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/HNAP1/"] [unique_id "atuVPMONfovfgSti4QoFswAAADQ"]
show less
|
Port Scan
|
|
🇺🇸
172.235.41.245
|
|
(mod_security) mod_security (id:920350) triggered by 172.235.41.245 (US/United States/172-235-41-245 ...
show more
(mod_security) mod_security (id:920350) triggered by 172.235.41.245 (US/United States/172-235-41-245.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 12:56:27.737021 2026] [security2:error] [pid 3820339:tid 3820458] [client 172.235.41.245:36494] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atuRu8ONfovfgSti4QoFAQAAACQ"]
show less
|
Port Scan
|
|
🇵🇰
223.123.38.91
|
|
(mod_security) mod_security (id:920350) triggered by 223.123.38.91 (PK/Pakistan/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 223.123.38.91 (PK/Pakistan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 12:46:18.150167 2026] [security2:error] [pid 3820339:tid 3820441] [client 223.123.38.91:13856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/HNAP1/"] [unique_id "atuPWsONfovfgSti4QoElwAAABM"]
show less
|
Port Scan
|
|
🇺🇸
20.118.235.40
|
|
(mod_security) mod_security (id:913100) triggered by 20.118.235.40 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:913100) triggered by 20.118.235.40 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 11:27:50.395521 2026] [security2:error] [pid 548001:tid 548386] [client 20.118.235.40:44418] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "att89mplV-As6j4SdwdmWAAAAXI"]
show less
|
Port Scan
|
|
🇬🇧
81.19.219.197
|
|
(mod_security) mod_security (id:920350) triggered by 81.19.219.197 (GB/United Kingdom/81-19-219-197. ...
show more
(mod_security) mod_security (id:920350) triggered by 81.19.219.197 (GB/United Kingdom/81-19-219-197.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:22:17.641601 2026] [security2:error] [pid 547958:tid 548454] [client 81.19.219.197:3868] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/sse"] [unique_id "atttmUrqaQWRTxme-OvNgwAAASQ"]
show less
|
Port Scan
|
|
🇬🇧
81.19.219.201
|
|
(mod_security) mod_security (id:920350) triggered by 81.19.219.201 (GB/United Kingdom/81-19-219-201. ...
show more
(mod_security) mod_security (id:920350) triggered by 81.19.219.201 (GB/United Kingdom/81-19-219-201.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:22:07.633984 2026] [security2:error] [pid 548001:tid 548339] [client 81.19.219.201:5516] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "atttj2plV-As6j4SdwdiPAAAAV4"]
show less
|
Port Scan
|
|
🇬🇧
31.14.254.41
|
|
(mod_security) mod_security (id:920350) triggered by 31.14.254.41 (GB/United Kingdom/31-14-254-41.in ...
show more
(mod_security) mod_security (id:920350) triggered by 31.14.254.41 (GB/United Kingdom/31-14-254-41.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:22:07.338639 2026] [security2:error] [pid 547958:tid 548436] [client 31.14.254.41:3016] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atttj0rqaQWRTxme-OvNfgAAARI"]
show less
|
Port Scan
|
|
🇬🇧
217.146.80.103
|
|
(mod_security) mod_security (id:920350) triggered by 217.146.80.103 (GB/United Kingdom/217-146-80-10 ...
show more
(mod_security) mod_security (id:920350) triggered by 217.146.80.103 (GB/United Kingdom/217-146-80-103.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:22:07.634837 2026] [security2:error] [pid 548001:tid 548329] [client 217.146.80.103:8916] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atttj2plV-As6j4SdwdiPQAAAVs"]
show less
|
Port Scan
|
|
🇬🇧
194.50.235.132
|
|
(mod_security) mod_security (id:920350) triggered by 194.50.235.132 (GB/United Kingdom/194-50-235-13 ...
show more
(mod_security) mod_security (id:920350) triggered by 194.50.235.132 (GB/United Kingdom/194-50-235-132.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:22:07.486398 2026] [security2:error] [pid 548001:tid 548302] [client 194.50.235.132:12386] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "atttj2plV-As6j4SdwdiOwAAAU4"]
show less
|
Port Scan
|
|
🇬🇧
193.176.29.8
|
|
(mod_security) mod_security (id:920350) triggered by 193.176.29.8 (GB/United Kingdom/193-176-29-8.in ...
show more
(mod_security) mod_security (id:920350) triggered by 193.176.29.8 (GB/United Kingdom/193-176-29-8.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:22:07.633969 2026] [security2:error] [pid 547958:tid 548440] [client 193.176.29.8:9748] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "atttj0rqaQWRTxme-OvNfwAAARY"]
show less
|
Port Scan
|
|
🇳🇱
64.205.72.215
|
|
(mod_security) mod_security (id:920350) triggered by 64.205.72.215 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 64.205.72.215 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:21:36.586180 2026] [security2:error] [pid 547958:tid 548437] [client 64.205.72.215:26739] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "atttcErqaQWRTxme-OvNeQAAARM"]
show less
|
Port Scan
|
|
🇺🇸
43.166.132.142
|
|
(mod_security) mod_security (id:920210) triggered by 43.166.132.142 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920210) triggered by 43.166.132.142 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:11:09.660092 2026] [security2:error] [pid 547958:tid 548457] [client 43.166.132.142:41396] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "attq_UrqaQWRTxme-OvM6wAAASc"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::494
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::494 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::494 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:01:43.392851 2026] [security2:error] [pid 547958:tid 548464] [client 2a01:4020:31:0:102::494:5266] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/api/mcp"] [unique_id "attox0rqaQWRTxme-OvMUAAAAS4"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::568
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::568 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::568 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:01:43.561321 2026] [security2:error] [pid 548001:tid 548346] [client 2a01:4020:31:0:102::568:13270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/sse"] [unique_id "attox2plV-As6j4SdwdhPgAAAWE"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::ef
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::ef (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::ef (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:01:43.392185 2026] [security2:error] [pid 547958:tid 548451] [client 2a01:4020:31:0:102::ef:16046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "attox0rqaQWRTxme-OvMTwAAASE"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::298
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::298 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::298 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:01:43.393437 2026] [security2:error] [pid 547958:tid 548427] [client 2a01:4020:31:0:102::298:12676] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "attox0rqaQWRTxme-OvMUgAAAQk"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::41a
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::41a (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::41a (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:01:43.218174 2026] [security2:error] [pid 548001:tid 548288] [client 2a01:4020:31:0:102::41a:11472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "attox2plV-As6j4SdwdhPQAAAUE"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::5bf
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::5bf (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::5bf (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Oct 23 10:01:43.043439 2026] [security2:error] [pid 548001:tid 548384] [client 2a01:4020:31:0:102::5bf:15064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "attox2plV-As6j4SdwdhPAAAAXE"]
show less
|
Port Scan
|