|
🇺🇸
45.156.129.100
|
|
(mod_security) mod_security (id:920350) triggered by 45.156.129.100 (US/United States/sh-chi-us-gp7- ...
show more
(mod_security) mod_security (id:920350) triggered by 45.156.129.100 (US/United States/sh-chi-us-gp7-wk142a.internet-census.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 11:38:46.016190 2026] [security2:error] [pid 2295373:tid 2295740] [client 45.156.129.100:15114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNohm0wqQMla56JUuaZfgAAAA0"]
show less
|
Port Scan
|
|
🇭🇰
124.156.179.141
|
|
(mod_security) mod_security (id:920210) triggered by 124.156.179.141 (HK/Hong Kong/-): 1 in the last ...
show more
(mod_security) mod_security (id:920210) triggered by 124.156.179.141 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:24:03.401208 2026] [security2:error] [pid 2295374:tid 2295875] [client 124.156.179.141:60134] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNXAxoCKb-Ova9bb6VHFAAAAGc"]
show less
|
Port Scan
|
|
🇺🇸
107.21.135.85
|
|
(mod_security) mod_security (id:920350) triggered by 107.21.135.85 (US/United States/ec2-107-21-135- ...
show more
(mod_security) mod_security (id:920350) triggered by 107.21.135.85 (US/United States/ec2-107-21-135-85.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:04:09.098221 2026] [security2:error] [pid 2295373:tid 2295755] [client 107.21.135.85:64268] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNSWW0wqQMla56JUuaU9gAAABc"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::3b7
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::3b7 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::3b7 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:55.170253 2026] [security2:error] [pid 2295373:tid 2295728] [client 2a01:4020:31:0:102::3b7:9284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/sse"] [unique_id "auNSD20wqQMla56JUuaU5QAAAAg"]
show less
|
Port Scan
|
|
🇬🇧
2a01:4020:1:1:102::1d5
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:1:1:102::1d5 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:1:1:102::1d5 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:42.060773 2026] [security2:error] [pid 2295373:tid 2295828] [client 2a01:4020:1:1:102::1d5:16413] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNSAm0wqQMla56JUuaU3wAAADk"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::1b
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::1b (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::1b (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.175740 2026] [security2:error] [pid 2295374:tid 2295881] [client 2a01:4020:31:0:102::1b:15974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "auNSBRoCKb-Ova9bb6VF-gAAAG0"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::564
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::564 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::564 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.169399 2026] [security2:error] [pid 2295374:tid 2295880] [client 2a01:4020:31:0:102::564:15526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/api/mcp"] [unique_id "auNSBRoCKb-Ova9bb6VF-QAAAGw"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::7bd
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::7bd (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::7bd (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.169400 2026] [security2:error] [pid 2295373:tid 2295760] [client 2a01:4020:31:0:102::7bd:15698] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "auNSBW0wqQMla56JUuaU4QAAABs"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::293
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::293 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::293 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:44.833198 2026] [security2:error] [pid 2295374:tid 2295879] [client 2a01:4020:31:0:102::293:12822] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNSBBoCKb-Ova9bb6VF-AAAAGs"]
show less
|
Port Scan
|
|
🇩🇪
2a01:4020:31:0:102::335
|
|
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::335 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::335 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.001699 2026] [security2:error] [pid 2295373:tid 2295742] [client 2a01:4020:31:0:102::335:12810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "auNSBW0wqQMla56JUuaU4AAAAA4"]
show less
|
Port Scan
|
|
🇨🇭
213.167.227.217
|
|
(mod_security) mod_security (id:920350) triggered by 213.167.227.217 (CH/Switzerland/34631.hostserv. ...
show more
(mod_security) mod_security (id:920350) triggered by 213.167.227.217 (CH/Switzerland/34631.hostserv.eu): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 09:21:36.950330 2026] [security2:error] [pid 2295374:tid 2295885] [client 213.167.227.217:44132] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNIYBoCKb-Ova9bb6VDqQAAAHE"]
show less
|
Port Scan
|
|
🇺🇸
172.105.128.13
|
|
(mod_security) mod_security (id:920350) triggered by 172.105.128.13 (US/United States/prague.scan.bu ...
show more
(mod_security) mod_security (id:920350) triggered by 172.105.128.13 (US/United States/prague.scan.bufferover.run): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:40:10.340892 2026] [security2:error] [pid 2295374:tid 2295838] [client 172.105.128.13:58436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auM-qhoCKb-Ova9bb6VBhgAAAEQ"]
show less
|
Port Scan
|
|
🇬🇧
5.226.140.29
|
|
(mod_security) mod_security (id:920350) triggered by 5.226.140.29 (GB/United Kingdom/5-226-140-29.in ...
show more
(mod_security) mod_security (id:920350) triggered by 5.226.140.29 (GB/United Kingdom/5-226-140-29.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.654730 2026] [security2:error] [pid 2295374:tid 2295865] [client 5.226.140.29:10270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "auM36RoCKb-Ova9bb6U_8gAAAF0"]
show less
|
Port Scan
|
|
🇬🇧
81.19.219.199
|
|
(mod_security) mod_security (id:920350) triggered by 81.19.219.199 (GB/United Kingdom/81-19-219-199. ...
show more
(mod_security) mod_security (id:920350) triggered by 81.19.219.199 (GB/United Kingdom/81-19-219-199.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.797684 2026] [security2:error] [pid 2295374:tid 2295872] [client 81.19.219.199:16090] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/sse"] [unique_id "auM36RoCKb-Ova9bb6U_9AAAAGQ"]
show less
|
Port Scan
|
|
🇬🇧
185.216.145.169
|
|
(mod_security) mod_security (id:920350) triggered by 185.216.145.169 (GB/United Kingdom/185-216-145- ...
show more
(mod_security) mod_security (id:920350) triggered by 185.216.145.169 (GB/United Kingdom/185-216-145-169.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.512812 2026] [security2:error] [pid 2295373:tid 2295834] [client 185.216.145.169:3484] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "auM36W0wqQMla56JUuaPIAAAADw"]
show less
|
Port Scan
|
|
🇬🇧
5.226.140.33
|
|
(mod_security) mod_security (id:920350) triggered by 5.226.140.33 (GB/United Kingdom/5-226-140-33.in ...
show more
(mod_security) mod_security (id:920350) triggered by 5.226.140.33 (GB/United Kingdom/5-226-140-33.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.654610 2026] [security2:error] [pid 2295374:tid 2295864] [client 5.226.140.33:7638] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auM36RoCKb-Ova9bb6U_8QAAAFw"]
show less
|
Port Scan
|
|
🇬🇧
31.14.254.2
|
|
(mod_security) mod_security (id:920350) triggered by 31.14.254.2 (GB/United Kingdom/31-14-254-2.infr ...
show more
(mod_security) mod_security (id:920350) triggered by 31.14.254.2 (GB/United Kingdom/31-14-254-2.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.655256 2026] [security2:error] [pid 2295374:tid 2295864] [client 31.14.254.2:1284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/api/mcp"] [unique_id "auM36RoCKb-Ova9bb6U_8wAAAFw"]
show less
|
Port Scan
|
|
🇬🇧
31.14.254.20
|
|
(mod_security) mod_security (id:920350) triggered by 31.14.254.20 (GB/United Kingdom/31-14-254-20.in ...
show more
(mod_security) mod_security (id:920350) triggered by 31.14.254.20 (GB/United Kingdom/31-14-254-20.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.655823 2026] [security2:error] [pid 2295373:tid 2295828] [client 31.14.254.20:13644] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "auM36W0wqQMla56JUuaPIQAAADk"]
show less
|
Port Scan
|
|
🇬🇧
81.19.219.195
|
|
(mod_security) mod_security (id:920350) triggered by 81.19.219.195 (GB/United Kingdom/81-19-219-195. ...
show more
(mod_security) mod_security (id:920350) triggered by 81.19.219.195 (GB/United Kingdom/81-19-219-195.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.370955 2026] [security2:error] [pid 2295373:tid 2295837] [client 81.19.219.195:3056] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auM36W0wqQMla56JUuaPHwAAAD4"]
show less
|
Port Scan
|
|
🇳🇱
86.38.187.236
|
|
(mod_security) mod_security (id:920350) triggered by 86.38.187.236 (CN/China/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 86.38.187.236 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:07.102937 2026] [security2:error] [pid 2295374:tid 2295845] [client 86.38.187.236:21416] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auM32xoCKb-Ova9bb6U_6wAAAEk"]
show less
|
Port Scan
|
|
🇸🇬
43.156.36.169
|
|
(mod_security) mod_security (id:920210) triggered by 43.156.36.169 (SG/Singapore/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:920210) triggered by 43.156.36.169 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:06:29.072611 2026] [security2:error] [pid 2295374:tid 2295857] [client 43.156.36.169:52792] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auM2xRoCKb-Ova9bb6U_sAAAAFU"]
show less
|
Port Scan
|
|
🇺🇸
104.168.115.214
|
|
(mod_security) mod_security (id:920350) triggered by 104.168.115.214 (US/United States/sportsmansloc ...
show more
(mod_security) mod_security (id:920350) triggered by 104.168.115.214 (US/United States/sportsmanslocker.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 07:07:00.051111 2026] [security2:error] [pid 2295373:tid 2295828] [client 104.168.115.214:63290] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/v1/models"] [unique_id "auMo1G0wqQMla56JUuaL1gAAADk"]
show less
|
Port Scan
|
|
🇺🇦
217.147.170.76
|
|
(mod_security) mod_security (id:920350) triggered by 217.147.170.76 (UA/Ukraine/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 217.147.170.76 (UA/Ukraine/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 06:40:41.902955 2026] [security2:error] [pid 2295374:tid 2295872] [client 217.147.170.76:48980] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/SDK/webLanguage"] [unique_id "auMiqRoCKb-Ova9bb6U6ngAAAGQ"]
show less
|
Port Scan
|
|
🇺🇸
43.130.139.177
|
|
(mod_security) mod_security (id:920210) triggered by 43.130.139.177 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920210) triggered by 43.130.139.177 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 05:17:25.435958 2026] [security2:error] [pid 2295374:tid 2295896] [client 43.130.139.177:40706] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auMPJRoCKb-Ova9bb6U1owAAAHw"]
show less
|
Port Scan
|
|
🇺🇸
50.116.49.221
|
|
(mod_security) mod_security (id:920350) triggered by 50.116.49.221 (US/United States/50-116-49-221.i ...
show more
(mod_security) mod_security (id:920350) triggered by 50.116.49.221 (US/United States/50-116-49-221.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 04:45:18.768767 2026] [security2:error] [pid 2295374:tid 2295898] [client 50.116.49.221:58180] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auMHnhoCKb-Ova9bb6UzugAAAH4"]
show less
|
Port Scan
|