🇺🇸
147.185.132.225
31 Oct 2026
(mod_security) mod_security (id:920280) triggered by 147.185.132.225 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:920280) triggered by 147.185.132.225 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 19:37:11.351985 2026] [security2:error] [pid 3831834:tid 3831944] [client 147.185.132.225:49892] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZ7p1fs-fvO7PC3BnfKugAAAFs"]
show less
Port Scan
🇩🇪
47.254.176.225
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 47.254.176.225 (DE/Germany/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 47.254.176.225 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 18:34:05.026139 2026] [security2:error] [pid 2179402:tid 2179491] [client 47.254.176.225:34826] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZs3UqcS014gWZIigVb4gAAAAY"]
show less
Port Scan
🇵🇰
110.38.247.222
31 Oct 2026
(mod_security) mod_security (id:920280) triggered by 110.38.247.222 (PK/Pakistan/GPONUser38247-222.w ...
show more
(mod_security) mod_security (id:920280) triggered by 110.38.247.222 (PK/Pakistan/GPONUser38247-222.wateen.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 18:09:47.784115 2026] [security2:error] [pid 2179402:tid 2179490] [client 110.38.247.222:32906] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/setup.cgi"] [unique_id "auZnK0qcS014gWZIigVZbgAAAAU"]
show less
Port Scan
🇺🇸
20.150.212.114
31 Oct 2026
(mod_security) mod_security (id:913100) triggered by 20.150.212.114 (US/United States/azpdwsdp0d7g.s ...
show more
(mod_security) mod_security (id:913100) triggered by 20.150.212.114 (US/United States/azpdwsdp0d7g.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 17:00:39.233585 2026] [security2:error] [pid 2179402:tid 2179510] [client 20.150.212.114:54622] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "auZW90qcS014gWZIigVRPwAAABk"]
show less
Port Scan
🇩🇪
130.61.115.11
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 130.61.115.11 (DE/Germany/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 130.61.115.11 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 16:56:17.292782 2026] [security2:error] [pid 2179402:tid 2179496] [client 130.61.115.11:19059] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZV8UqcS014gWZIigVQzQAAAAs"]
show less
Port Scan
🇧🇷
189.113.1.198
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 189.113.1.198 (BR/Brazil/none.underplatform.com ...
show more
(mod_security) mod_security (id:920350) triggered by 189.113.1.198 (BR/Brazil/none.underplatform.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 16:50:31.000058 2026] [security2:error] [pid 2179402:tid 2179489] [client 189.113.1.198:52718] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZUlkqcS014gWZIigVQJAAAAAQ"]
show less
Port Scan
🇺🇸
66.132.172.130
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 66.132.172.130 (US/United States/130.172.132.66 ...
show more
(mod_security) mod_security (id:920350) triggered by 66.132.172.130 (US/United States/130.172.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 16:41:43.205012 2026] [security2:error] [pid 2179402:tid 2179523] [client 66.132.172.130:64978] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZSh0qcS014gWZIigVPCgAAACY"]
show less
Port Scan
🇺🇸
146.70.171.115
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 146.70.171.115 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 146.70.171.115 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 15:40:46.736362 2026] [security2:error] [pid 2179402:tid 2179485] [client 146.70.171.115:53258] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auZEPkqcS014gWZIigVICAAAAAA"]
show less
Port Scan
🇭🇰
43.161.234.148
31 Oct 2026
(mod_security) mod_security (id:920210) triggered by 43.161.234.148 (HK/Hong Kong/-): 1 in the last ...
show more
(mod_security) mod_security (id:920210) triggered by 43.161.234.148 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 15:20:08.786529 2026] [security2:error] [pid 2179402:tid 2179521] [client 43.161.234.148:53496] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auY_aEqcS014gWZIigVFvgAAACQ"]
show less
Port Scan
🇻🇳
160.250.181.248
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 160.250.181.248 (VN/Vietnam/static.eztech.vn): ...
show more
(mod_security) mod_security (id:920350) triggered by 160.250.181.248 (VN/Vietnam/static.eztech.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 14:34:29.654951 2026] [security2:error] [pid 2179402:tid 2179498] [client 160.250.181.248:52160] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auY0tUqcS014gWZIigU_9wAAAA0"]
show less
Port Scan
🇺🇸
172.236.228.39
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 172.236.228.39 (US/United States/172-236-228-39 ...
show more
(mod_security) mod_security (id:920350) triggered by 172.236.228.39 (US/United States/172-236-228-39.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 14:02:50.492140 2026] [security2:error] [pid 2179402:tid 2179514] [client 172.236.228.39:8522] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auYtSkqcS014gWZIigU8egAAAB0"]
show less
Port Scan
🇵🇰
124.29.224.91
31 Oct 2026
(mod_security) mod_security (id:920280) triggered by 124.29.224.91 (PK/Pakistan/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920280) triggered by 124.29.224.91 (PK/Pakistan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 13:39:10.137495 2026] [security2:error] [pid 2179402:tid 2179548] [client 124.29.224.91:38945] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/setup.cgi"] [unique_id "auYnvkqcS014gWZIigU5-AAAAD8"]
show less
Port Scan
🇺🇸
172.239.64.155
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 172.239.64.155 (US/United States/172-239-64-155 ...
show more
(mod_security) mod_security (id:920350) triggered by 172.239.64.155 (US/United States/172-239-64-155.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 12:47:40.968597 2026] [security2:error] [pid 2874890:tid 2875247] [client 172.239.64.155:39974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auYbrP_uqzRgzy8rqdZKzAAAAFU"]
show less
Port Scan
🇺🇸
170.106.192.3
31 Oct 2026
(mod_security) mod_security (id:920210) triggered by 170.106.192.3 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 170.106.192.3 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 12:33:04.920261 2026] [security2:error] [pid 2874890:tid 2875245] [client 170.106.192.3:35158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auYYQP_uqzRgzy8rqdZIuAAAAFM"]
show less
Port Scan
🇺🇸
109.105.209.22
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 109.105.209.22 (US/United States/zl-laxk-us-gp7 ...
show more
(mod_security) mod_security (id:920350) triggered by 109.105.209.22 (US/United States/zl-laxk-us-gp7-wk139a.internet-census.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 12:19:19.892672 2026] [security2:error] [pid 2874890:tid 2875249] [client 109.105.209.22:45464] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auYVB__uqzRgzy8rqdZHDQAAAFc"]
show less
Port Scan
🇸🇬
13.213.70.232
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 13.213.70.232 (SG/Singapore/ec2-13-213-70-232.a ...
show more
(mod_security) mod_security (id:920350) triggered by 13.213.70.232 (SG/Singapore/ec2-13-213-70-232.ap-southeast-1.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 12:11:06.833600 2026] [security2:error] [pid 2874890:tid 2875292] [client 13.213.70.232:49548] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/graphql"] [unique_id "auYTGv_uqzRgzy8rqdZGKgAAAH8"]
show less
Port Scan
🇭🇰
123.58.209.112
31 Oct 2026
(ftpd) Failed FTP login from 123.58.209.112 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Dir ...
show more
(ftpd) Failed FTP login from 123.58.209.112 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 31 11:29:28 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
🇧🇪
198.235.24.192
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 198.235.24.192 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 198.235.24.192 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 11:22:48.879303 2026] [security2:error] [pid 2874892:tid 2875381] [client 198.235.24.192:57500] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auYHyAzQ_TtHulcWzc3aBQAAAR0"]
show less
Port Scan
🇺🇸
20.106.173.193
31 Oct 2026
(mod_security) mod_security (id:913100) triggered by 20.106.173.193 (US/United States/azpdesqbmulp.s ...
show more
(mod_security) mod_security (id:913100) triggered by 20.106.173.193 (US/United States/azpdesqbmulp.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 10:26:52.072835 2026] [security2:error] [pid 2874890:tid 2875235] [client 20.106.173.193:55082] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "auX6rP_uqzRgzy8rqdZASwAAAEk"]
show less
Port Scan
🇳🇱
209.38.111.139
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 209.38.111.139 (NL/The Netherlands/117973.fores ...
show more
(mod_security) mod_security (id:920350) triggered by 209.38.111.139 (NL/The Netherlands/117973.forestengine.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 10:26:20.913112 2026] [security2:error] [pid 2874890:tid 2875279] [client 209.38.111.139:43724] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auX6jP_uqzRgzy8rqdZARQAAAHM"]
show less
Port Scan
🇺🇸
13.218.165.217
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 13.218.165.217 (US/United States/ec2-13-218-165 ...
show more
(mod_security) mod_security (id:920350) triggered by 13.218.165.217 (US/United States/ec2-13-218-165-217.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 10:05:48.984516 2026] [security2:error] [pid 2874890:tid 2875226] [client 13.218.165.217:15000] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auX1vP_uqzRgzy8rqdY_PAAAAEE"]
show less
Port Scan
🇰🇭
203.189.158.27
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 203.189.158.27 (KH/Cambodia/headquarter.online. ...
show more
(mod_security) mod_security (id:920350) triggered by 203.189.158.27 (KH/Cambodia/headquarter.online.com.kh): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 09:31:14.819981 2026] [security2:error] [pid 2874890:tid 2875236] [client 203.189.158.27:40551] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auXtov_uqzRgzy8rqdY9nQAAAEo"]
show less
Port Scan
🇬🇧
2a06:4884:5000::67
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a06:4884:5000::67 (r5-103-67.monitoring.intern ...
show more
(mod_security) mod_security (id:920350) triggered by 2a06:4884:5000::67 (r5-103-67.monitoring.internet-measurement.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 09:22:54.589332 2026] [security2:error] [pid 2874890:tid 2875249] [client 2a06:4884:5000::67:33387] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auXrrv_uqzRgzy8rqdY8sAAAAFc"]
show less
Port Scan
🇺🇸
66.228.53.162
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 66.228.53.162 (US/United States/66-228-53-162.i ...
show more
(mod_security) mod_security (id:920350) triggered by 66.228.53.162 (US/United States/66-228-53-162.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 06:59:28.911534 2026] [security2:error] [pid 2874892:tid 2875403] [client 66.228.53.162:14886] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auXKEAzQ_TtHulcWzc3KnQAAATM"]
show less
Port Scan
🇳🇱
45.153.34.178
31 Oct 2026
(mod_security) mod_security (id:920350) triggered by 45.153.34.178 (NL/The Netherlands/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 45.153.34.178 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Oct 31 04:56:32.953519 2026] [security2:error] [pid 2874892:tid 2875412] [client 45.153.34.178:33726] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/f27eafa84b72c53f24c4b7a5de094447"] [unique_id "auWtQAzQ_TtHulcWzc3DBQAAATw"]
show less
Port Scan