π§π·
164.152.39.166
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 164.152.39.166 (BR/Brazil/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 164.152.39.166 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 02:24:00.901393 2026] [security2:error] [pid 2295374:tid 2295857] [client 164.152.39.166:49498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/phpmyadmin2022/index.php"] [unique_id "auLmgBoCKb-Ova9bb6UrRQAAAFU"]
show less
Port Scan
πΊπΈ
216.180.246.69
29 Oct 2026
(mod_security) mod_security (id:920280) triggered by 216.180.246.69 (FR/France/crawler069.deepfield. ...
show more
(mod_security) mod_security (id:920280) triggered by 216.180.246.69 (FR/France/crawler069.deepfield.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 01:55:44.048288 2026] [security2:error] [pid 2295373:tid 2295805] [client 216.180.246.69:21045] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auLf4G0wqQMla56JUuZ8GAAAAC0"]
show less
Port Scan
π¨π¦
85.217.149.56
29 Oct 2026
(eximsyntax) Exim syntax errors from 85.217.149.56 (CA/Canada/o056.scanner.modat.io): 1 in the last ...
show more
(eximsyntax) Exim syntax errors from 85.217.149.56 (CA/Canada/o056.scanner.modat.io): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-10-29 01:34:14 SMTP call from o056.scanner.modat.io [85.217.149.56] dropped: too many syntax or protocol errors (last command was "\023\003\023\001\023\002\001??Β?\005?\005\001?????", NULL)
show less
Port Scan
πΊπΈ
47.251.173.60
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 47.251.173.60 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 47.251.173.60 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 00:53:22.365613 2026] [security2:error] [pid 2295374:tid 2295878] [client 47.251.173.60:48508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auLRQhoCKb-Ova9bb6UmAgAAAGo"]
show less
Port Scan
π§πͺ
35.241.224.239
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 35.241.224.239 (BE/Belgium/239.224.241.35.bc.go ...
show more
(mod_security) mod_security (id:920350) triggered by 35.241.224.239 (BE/Belgium/239.224.241.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 23:45:45.059654 2026] [security2:error] [pid 876766:tid 876850] [client 35.241.224.239:7414] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auLBab8jmW5Nc96qcLJIUQAAAEE"]
show less
Port Scan
π§πͺ
34.62.91.8
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 34.62.91.8 (BE/Belgium/8.91.62.34.bc.googleuser ...
show more
(mod_security) mod_security (id:920350) triggered by 34.62.91.8 (BE/Belgium/8.91.62.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 23:44:40.843671 2026] [security2:error] [pid 876766:tid 876892] [client 34.62.91.8:46674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auLBKL8jmW5Nc96qcLJINAAAAGs"]
show less
Port Scan
πΊπΈ
240b:4002:10:d00:1241:5c12:1a2c:2f94
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 240b:4002:10:d00:1241:5c12:1a2c:2f94 (Unknown): ...
show more
(mod_security) mod_security (id:920350) triggered by 240b:4002:10:d00:1241:5c12:1a2c:2f94 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 23:00:27.378367 2026] [security2:error] [pid 876766:tid 876871] [client 240b:4002:10:d00:1241:5c12:1a2c:2f94:60926] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "auK2y78jmW5Nc96qcLJDDgAAAFY"]
show less
Port Scan
π§πͺ
35.240.40.104
29 Oct 2026
(ftpd) Failed FTP login from 35.240.40.104 (BE/Belgium/104.40.240.35.bc.googleusercontent.com): 1 in ...
show more
(ftpd) Failed FTP login from 35.240.40.104 (BE/Belgium/104.40.240.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 28 22:45:50 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
π΅π±
194.180.49.41
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 194.180.49.41 (DE/Germany/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 194.180.49.41 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 22:41:12.955282 2026] [security2:error] [pid 876766:tid 876886] [client 194.180.49.41:53214] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKySL8jmW5Nc96qcLJBDwAAAGU"]
show less
Port Scan
πΊπΈ
104.237.145.228
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 104.237.145.228 (US/United States/104-237-145-2 ...
show more
(mod_security) mod_security (id:920350) triggered by 104.237.145.228 (US/United States/104-237-145-228.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 22:39:43.474261 2026] [security2:error] [pid 876766:tid 876901] [client 104.237.145.228:38662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKx778jmW5Nc96qcLJA6gAAAHQ"]
show less
Port Scan
πΊπΈ
23.239.11.190
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 23.239.11.190 (US/United States/23-239-11-190.i ...
show more
(mod_security) mod_security (id:920350) triggered by 23.239.11.190 (US/United States/23-239-11-190.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 22:33:05.592113 2026] [security2:error] [pid 876766:tid 876907] [client 23.239.11.190:47422] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKwYb8jmW5Nc96qcLJANgAAAHo"]
show less
Port Scan
πΊπΈ
20.169.91.29
29 Oct 2026
(mod_security) mod_security (id:913100) triggered by 20.169.91.29 (US/United States/azpdwsreeom9.str ...
show more
(mod_security) mod_security (id:913100) triggered by 20.169.91.29 (US/United States/azpdwsreeom9.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 22:31:37.954501 2026] [security2:error] [pid 876766:tid 876856] [client 20.169.91.29:49438] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "auKwCb8jmW5Nc96qcLJAEwAAAEc"]
show less
Port Scan
π³π±
188.166.55.144
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 188.166.55.144 (NL/The Netherlands/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 188.166.55.144 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 22:25:05.435792 2026] [security2:error] [pid 876766:tid 876904] [client 188.166.55.144:34272] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKugb8jmW5Nc96qcLI_aQAAAHc"]
show less
Port Scan
π³π±
198.13.158.40
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 198.13.158.40 (NL/The Netherlands/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 198.13.158.40 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 22:03:07.767818 2026] [security2:error] [pid 876766:tid 876876] [client 198.13.158.40:42158] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKpW78jmW5Nc96qcLI8_AAAAFs"]
show less
Port Scan
πΊπΈ
20.65.146.26
29 Oct 2026
(mod_security) mod_security (id:913100) triggered by 20.65.146.26 (US/United States/azpdsg7sgux2.str ...
show more
(mod_security) mod_security (id:913100) triggered by 20.65.146.26 (US/United States/azpdsg7sgux2.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 21:47:58.555283 2026] [security2:error] [pid 876766:tid 876861] [client 20.65.146.26:59684] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "auKlzr8jmW5Nc96qcLI6rwAAAEw"]
show less
Port Scan
π©π΄
186.6.94.184
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 186.6.94.184 (DO/Dominican Republic/184.94.6.18 ...
show more
(mod_security) mod_security (id:920350) triggered by 186.6.94.184 (DO/Dominican Republic/184.94.6.186.f.dyn.codetel.net.do): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 20:40:20.555234 2026] [security2:error] [pid 876766:tid 876870] [client 186.6.94.184:52119] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/invoker/EJBInvokerServlet"] [unique_id "auKV9L8jmW5Nc96qcLIzwAAAAFU"]
show less
Port Scan
πΊπΈ
172.236.228.115
28 Oct 2026
(mod_security) mod_security (id:920350) triggered by 172.236.228.115 (US/United States/172-236-228-1 ...
show more
(mod_security) mod_security (id:920350) triggered by 172.236.228.115 (US/United States/172-236-228-115.ip.linodeusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 19:55:09.846628 2026] [security2:error] [pid 876766:tid 876871] [client 172.236.228.115:49240] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKLXb8jmW5Nc96qcLIvHQAAAFY"]
show less
Port Scan
π¨π³
182.126.116.113
28 Oct 2026
(mod_security) mod_security (id:920280) triggered by 182.126.116.113 (CN/China/hn.kd.ny.adsl): 1 in ...
show more
(mod_security) mod_security (id:920280) triggered by 182.126.116.113 (CN/China/hn.kd.ny.adsl): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 19:40:36.366615 2026] [security2:error] [pid 876766:tid 876888] [client 182.126.116.113:60614] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/boaform/admin/formLogin"] [unique_id "auKH9L8jmW5Nc96qcLItowAAAGc"]
show less
Port Scan
π·πΊ
31.184.195.244
28 Oct 2026
(mod_security) mod_security (id:920280) triggered by 31.184.195.244 (RU/Russia/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920280) triggered by 31.184.195.244 (RU/Russia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 19:25:07.941249 2026] [security2:error] [pid 876766:tid 876869] [client 31.184.195.244:60023] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKEU78jmW5Nc96qcLIr4QAAAFQ"]
show less
Port Scan
πΊπΈ
137.184.56.224
28 Oct 2026
(mod_security) mod_security (id:920350) triggered by 137.184.56.224 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 137.184.56.224 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 19:06:49.653832 2026] [security2:error] [pid 876766:tid 876889] [client 137.184.56.224:58166] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auKACb8jmW5Nc96qcLIp_AAAAGg"]
show less
Port Scan
π°π·
43.155.162.41
28 Oct 2026
(mod_security) mod_security (id:920210) triggered by 43.155.162.41 (KR/South Korea/-): 1 in the last ...
show more
(mod_security) mod_security (id:920210) triggered by 43.155.162.41 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 17:50:45.596256 2026] [security2:error] [pid 3363996:tid 3364105] [client 43.155.162.41:43658] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auJuNbzRNsFip_rbw7VgMAAAABo"]
show less
Port Scan
π³π±
194.26.192.140
28 Oct 2026
(mod_security) mod_security (id:920350) triggered by 194.26.192.140 (NL/The Netherlands/194-26-192-1 ...
show more
(mod_security) mod_security (id:920350) triggered by 194.26.192.140 (NL/The Netherlands/194-26-192-140.static.invalid): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 16:15:13.108979 2026] [security2:error] [pid 3363996:tid 3364110] [client 194.26.192.140:49161] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auJX0bzRNsFip_rbw7VV0QAAAB8"]
show less
Port Scan
πΊπΈ
147.185.132.66
28 Oct 2026
(mod_security) mod_security (id:920280) triggered by 147.185.132.66 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920280) triggered by 147.185.132.66 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 15:55:10.779213 2026] [security2:error] [pid 3363996:tid 3364116] [client 147.185.132.66:56241] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auJTHrzRNsFip_rbw7VT0AAAACU"]
show less
Port Scan
πΊπΈ
66.132.195.109
28 Oct 2026
(mod_security) mod_security (id:920350) triggered by 66.132.195.109 (US/United States/109.195.132.66 ...
show more
(mod_security) mod_security (id:920350) triggered by 66.132.195.109 (US/United States/109.195.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 15:45:43.400579 2026] [security2:error] [pid 3363996:tid 3364119] [client 66.132.195.109:45512] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auJQ57zRNsFip_rbw7VSnwAAACg"]
show less
Port Scan
πΊπΈ
97.74.230.245
28 Oct 2026
(mod_security) mod_security (id:920350) triggered by 97.74.230.245 (US/United States/245.230.74.97.h ...
show more
(mod_security) mod_security (id:920350) triggered by 97.74.230.245 (US/United States/245.230.74.97.host.secureserver.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Oct 28 15:21:38.538915 2026] [security2:error] [pid 3363996:tid 3364129] [client 97.74.230.245:59450] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.git/HEAD"] [unique_id "auJLQrzRNsFip_rbw7VQKgAAADI"]
show less
Port Scan