🇩🇪
194.88.98.112
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 194.88.98.112 (DE/Germany/194-88-98-112.infrawa ...
show more
(mod_security) mod_security (id:920350) triggered by 194.88.98.112 (DE/Germany/194-88-98-112.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 06:42:34.589031 2026] [security2:error] [pid 2502897:tid 2503413] [client 194.88.98.112:21509] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auclqoCWZ81ICb7UEm-iqgAAALc"]
show less
Port Scan
🇹🇷
156.229.60.162
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 156.229.60.162 (TR/Turkey/static.onlinehosting. ...
show more
(mod_security) mod_security (id:920350) triggered by 156.229.60.162 (TR/Turkey/static.onlinehosting.com.tr): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 06:38:03.304662 2026] [security2:error] [pid 2502897:tid 2503413] [client 156.229.60.162:59956] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auckm4CWZ81ICb7UEm-iaQAAALc"]
show less
Port Scan
🇹🇭
43.164.1.211
01 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.164.1.211 (TH/Thailand/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920210) triggered by 43.164.1.211 (TH/Thailand/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 06:06:40.536474 2026] [security2:error] [pid 2502897:tid 2503396] [client 43.164.1.211:34836] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aucdQICWZ81ICb7UEm-gogAAAKY"]
show less
Port Scan
🇺🇸
172.206.242.255
01 Nov 2026
(mod_security) mod_security (id:913100) triggered by 172.206.242.255 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:913100) triggered by 172.206.242.255 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 06:05:10.253453 2026] [security2:error] [pid 2502896:tid 2503219] [client 172.206.242.255:47764] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "aucc5k_3ieHo3sUbMhfPUgAAAGA"]
show less
Port Scan
🇺🇸
212.56.54.191
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 212.56.54.191 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 212.56.54.191 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 05:45:10.749861 2026] [security2:error] [pid 2502897:tid 2503399] [client 212.56.54.191:14224] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aucYNoCWZ81ICb7UEm-fOwAAAKk"]
show less
Port Scan
🇺🇸
146.190.134.221
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 146.190.134.221 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 146.190.134.221 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 05:35:25.721991 2026] [security2:error] [pid 2502897:tid 2503397] [client 146.190.134.221:47942] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aucV7YCWZ81ICb7UEm-epQAAAKc"]
show less
Port Scan
🇺🇸
143.198.116.111
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 143.198.116.111 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 143.198.116.111 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 04:54:23.805298 2026] [security2:error] [pid 2502897:tid 2503408] [client 143.198.116.111:57208] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aucMT4CWZ81ICb7UEm-cKgAAALI"]
show less
Port Scan
🇺🇸
2602:80d:1008::3c
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::3c (Unknown): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::3c (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 04:47:39.189845 2026] [security2:error] [pid 2502896:tid 2503152] [client 2602:80d:1008::3c:21190] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aucKu0_3ieHo3sUbMhfLEQAAAEI"]
show less
Port Scan
🇧🇩
45.114.84.126
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 45.114.84.126 (BD/Bangladesh/-): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 45.114.84.126 (BD/Bangladesh/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 04:29:49.743275 2026] [security2:error] [pid 2502897:tid 2503418] [client 45.114.84.126:39198] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.git/config"] [unique_id "aucGjYCWZ81ICb7UEm-aagAAALw"]
show less
Port Scan
🇧🇪
34.140.146.112
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 34.140.146.112 (BE/Belgium/112.146.140.34.bc.go ...
show more
(mod_security) mod_security (id:920350) triggered by 34.140.146.112 (BE/Belgium/112.146.140.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 03:45:15.749920 2026] [security2:error] [pid 1079049:tid 1079506] [client 34.140.146.112:51424] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aub8G22NMvQaG58rt54sfwAAALY"]
show less
Port Scan
🇺🇸
170.106.72.93
01 Nov 2026
(mod_security) mod_security (id:920210) triggered by 170.106.72.93 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 170.106.72.93 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 02:59:46.846140 2026] [security2:error] [pid 1079047:tid 1079533] [client 170.106.72.93:50698] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aubxcgWlKF5-wtfZqWZH8QAAAFg"]
show less
Port Scan
🇺🇸
65.49.1.35
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 65.49.1.35 (US/United States/35.0-24.1.49.65.in ...
show more
(mod_security) mod_security (id:920350) triggered by 65.49.1.35 (US/United States/35.0-24.1.49.65.in-addr.arpa): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 02:43:29.924411 2026] [security2:error] [pid 1079049:tid 1079475] [client 65.49.1.35:32867] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "aubtoW2NMvQaG58rt54pGAAAAJ8"]
show less
Port Scan
🇺🇸
65.49.1.24
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 65.49.1.24 (US/United States/24.0-24.1.49.65.in ...
show more
(mod_security) mod_security (id:920350) triggered by 65.49.1.24 (US/United States/24.0-24.1.49.65.in-addr.arpa): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 02:39:20.555762 2026] [security2:error] [pid 1079047:tid 1079480] [client 65.49.1.24:28394] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aubsqAWlKF5-wtfZqWZGgwAAAEE"]
show less
Port Scan
🇺🇸
173.255.225.25
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 173.255.225.25 (US/United States/173-255-225-25 ...
show more
(mod_security) mod_security (id:920350) triggered by 173.255.225.25 (US/United States/173-255-225-25.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 01:49:52.040859 2026] [security2:error] [pid 1079047:tid 1079533] [client 173.255.225.25:40672] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aubTAAWlKF5-wtfZqWY_RwAAAFg"]
show less
Port Scan
🇺🇸
20.112.237.213
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 20.112.237.213 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 20.112.237.213 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 01:48:10.760797 2026] [security2:error] [pid 1079047:tid 1079560] [client 20.112.237.213:48039] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/health/liveliness"] [unique_id "aubSmgWlKF5-wtfZqWY_JwAAAHM"]
show less
Port Scan
🇧🇪
35.206.135.14
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 35.206.135.14 (BE/Belgium/14.135.206.35.bc.goog ...
show more
(mod_security) mod_security (id:920350) triggered by 35.206.135.14 (BE/Belgium/14.135.206.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 01:45:31.487106 2026] [security2:error] [pid 1079047:tid 1079566] [client 35.206.135.14:12064] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aubR-wWlKF5-wtfZqWY-_gAAAHk"]
show less
Port Scan
🇨🇦
147.161.3.182
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 147.161.3.182 (CA/Canada/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 147.161.3.182 (CA/Canada/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 01:13:09.988510 2026] [security2:error] [pid 1079047:tid 1079557] [client 147.161.3.182:55988] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aubKZQWlKF5-wtfZqWY9GgAAAHA"]
show less
Port Scan
🇭🇰
123.58.219.98
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 123.58.219.98 (HK/Hong Kong/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:920350) triggered by 123.58.219.98 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 23:03:07.258661 2026] [security2:error] [pid 3831834:tid 3831969] [client 123.58.219.98:54986] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/version"] [unique_id "auar61fs-fvO7PC3BnfgwQAAAHQ"]
show less
Port Scan
🇧🇪
35.206.135.88
01 Nov 2026
(ftpd) Failed FTP login from 35.206.135.88 (BE/Belgium/88.135.206.35.bc.googleusercontent.com): 1 in ...
show more
(ftpd) Failed FTP login from 35.206.135.88 (BE/Belgium/88.135.206.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 31 23:01:32 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
🇳🇱
188.166.117.73
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 188.166.117.73 (NL/The Netherlands/118284.fores ...
show more
(mod_security) mod_security (id:920350) triggered by 188.166.117.73 (NL/The Netherlands/118284.forestengine.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 22:26:29.804126 2026] [security2:error] [pid 3831834:tid 3831937] [client 188.166.117.73:58940] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auajVVfs-fvO7PC3Bnfc_gAAAFQ"]
show less
Port Scan
🇨🇦
45.198.224.125
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 45.198.224.125 (SE/Sweden/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 45.198.224.125 (SE/Sweden/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 21:01:01.167378 2026] [security2:error] [pid 3831834:tid 3831919] [client 45.198.224.125:46810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auaPTVfs-fvO7PC3BnfUJAAAAEI"]
show less
Port Scan
🇺🇸
172.236.228.193
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 172.236.228.193 (US/United States/172-236-228-1 ...
show more
(mod_security) mod_security (id:920350) triggered by 172.236.228.193 (US/United States/172-236-228-193.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 20:50:31.242298 2026] [security2:error] [pid 3831834:tid 3831971] [client 172.236.228.193:5608] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auaM11fs-fvO7PC3BnfTEgAAAHY"]
show less
Port Scan
🇺🇸
147.185.132.225
31 Oct 2026
(mod_security) mod_security (id:920280) triggered by 147.185.132.225 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:920280) triggered by 147.185.132.225 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 19:37:11.351985 2026] [security2:error] [pid 3831834:tid 3831944] [client 147.185.132.225:49892] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZ7p1fs-fvO7PC3BnfKugAAAFs"]
show less
Port Scan
🇩🇪
47.254.176.225
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 47.254.176.225 (DE/Germany/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 47.254.176.225 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 18:34:05.026139 2026] [security2:error] [pid 2179402:tid 2179491] [client 47.254.176.225:34826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZs3UqcS014gWZIigVb4gAAAAY"]
show less
Port Scan
🇵🇰
110.38.247.222
31 Oct 2026
(mod_security) mod_security (id:920280) triggered by 110.38.247.222 (PK/Pakistan/GPONUser38247-222.w ...
show more
(mod_security) mod_security (id:920280) triggered by 110.38.247.222 (PK/Pakistan/GPONUser38247-222.wateen.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 18:09:47.784115 2026] [security2:error] [pid 2179402:tid 2179490] [client 110.38.247.222:32906] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/setup.cgi"] [unique_id "auZnK0qcS014gWZIigVZbgAAAAU"]
show less
Port Scan