🇺🇸
20.65.193.1
11 hours ago
(mod_security) mod_security (id:913100) triggered by 20.65.193.1 (US/United States/azpdsssyxvsv.stre ...
show more
(mod_security) mod_security (id:913100) triggered by 20.65.193.1 (US/United States/azpdsssyxvsv.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 06:26:57.493503 2026] [security2:error] [pid 73813:tid 73885] [client 20.65.193.1:55506] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/autodiscover/autodiscover.json"] [unique_id "al9JceqixIWE1V6lkR0o4wAAAAU"]
show less
Port Scan
🇺🇸
135.222.40.122
12 hours ago
(mod_security) mod_security (id:913100) triggered by 135.222.40.122 (US/United States/azpdescck8gl.s ...
show more
(mod_security) mod_security (id:913100) triggered by 135.222.40.122 (US/United States/azpdescck8gl.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 06:06:06.722719 2026] [security2:error] [pid 73813:tid 73922] [client 135.222.40.122:42662] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/actuator/health"] [unique_id "al9EjuqixIWE1V6lkR0UaQAAACk"]
show less
Port Scan
🇺🇸
43.165.125.66
12 hours ago
(mod_security) mod_security (id:920210) triggered by 43.165.125.66 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 43.165.125.66 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 06:05:12.638506 2026] [security2:error] [pid 73813:tid 73907] [client 43.165.125.66:40366] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al9EWOqixIWE1V6lkR0TigAAABs"]
show less
Port Scan
🇳🇱
45.142.193.24
12 hours ago
(mod_security) mod_security (id:920350) triggered by 45.142.193.24 (GB/United Kingdom/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 45.142.193.24 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 05:24:42.393097 2026] [security2:error] [pid 73813:tid 73910] [client 45.142.193.24:49528] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/global-protect/login.esp"] [unique_id "al862uqixIWE1V6lkR351wAAAB4"]
show less
Port Scan
🇺🇸
54.167.87.227
13 hours ago
(mod_security) mod_security (id:920350) triggered by 54.167.87.227 (US/United States/ec2-54-167-87-2 ...
show more
(mod_security) mod_security (id:920350) triggered by 54.167.87.227 (US/United States/ec2-54-167-87-227.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 04:28:28.084927 2026] [security2:error] [pid 72580:tid 72668] [client 54.167.87.227:48520] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/robots.txt"] [unique_id "al8trC6iclTiuuQ9nXzP0QAAAEU"]
show less
Port Scan
🇺🇸
34.229.16.77
13 hours ago
(mod_security) mod_security (id:920350) triggered by 34.229.16.77 (US/United States/ec2-34-229-16-77 ...
show more
(mod_security) mod_security (id:920350) triggered by 34.229.16.77 (US/United States/ec2-34-229-16-77.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 04:28:19.027818 2026] [security2:error] [pid 72580:tid 72703] [client 34.229.16.77:63954] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al8toy6iclTiuuQ9nXzPqgAAAGg"]
show less
Port Scan
🇺🇸
54.163.60.25
13 hours ago
(mod_security) mod_security (id:920350) triggered by 54.163.60.25 (US/United States/ec2-54-163-60-25 ...
show more
(mod_security) mod_security (id:920350) triggered by 54.163.60.25 (US/United States/ec2-54-163-60-25.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 04:25:24.831740 2026] [security2:error] [pid 72580:tid 72678] [client 54.163.60.25:30622] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "al8s9C6iclTiuuQ9nXzM9AAAAE8"]
show less
Port Scan
🇺🇸
66.132.195.59
14 hours ago
(mod_security) mod_security (id:920350) triggered by 66.132.195.59 (US/United States/59.195.132.66.c ...
show more
(mod_security) mod_security (id:920350) triggered by 66.132.195.59 (US/United States/59.195.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 03:51:24.567478 2026] [security2:error] [pid 71463:tid 71561] [client 66.132.195.59:36288] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al8k_FiFY_U9jTGMSuUCdAAAAA8"]
show less
Port Scan
🇧🇷
43.135.211.148
14 hours ago
(mod_security) mod_security (id:920210) triggered by 43.135.211.148 (BR/Brazil/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920210) triggered by 43.135.211.148 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 03:16:56.174384 2026] [security2:error] [pid 71463:tid 71599] [client 43.135.211.148:55954] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al8c6FiFY_U9jTGMSuXonwAAADU"]
show less
Port Scan
🇺🇸
135.237.125.155
15 hours ago
(mod_security) mod_security (id:913100) triggered by 135.237.125.155 (US/United States/azpdesz14awe. ...
show more
(mod_security) mod_security (id:913100) triggered by 135.237.125.155 (US/United States/azpdesz14awe.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 02:46:49.778459 2026] [security2:error] [pid 69733:tid 69874] [client 135.237.125.155:37670] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "al8V2bcVpHsAn-oUXuU9qQAAAHo"]
show less
Port Scan
🇳🇱
45.153.34.89
16 hours ago
(mod_security) mod_security (id:911100) triggered by 45.153.34.89 (NL/The Netherlands/-): 1 in the l ...
show more
(mod_security) mod_security (id:911100) triggered by 45.153.34.89 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 02:01:58.155666 2026] [security2:error] [pid 69733:tid 69851] [client 45.153.34.89:43602] ModSecurity: Access denied with code 406 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/etc/modsecurity.d/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/METHOD-ENFORCEMENT"] [tag "capec/1000/210/272/220/274"] [redacted] [uri "/"] [unique_id "al8LVrcVpHsAn-oUXuUWCQAAAGM"]
show less
Port Scan
🇧🇪
34.62.247.170
16 hours ago
(mod_security) mod_security (id:920350) triggered by 34.62.247.170 (BE/Belgium/170.247.62.34.bc.goog ...
show more
(mod_security) mod_security (id:920350) triggered by 34.62.247.170 (BE/Belgium/170.247.62.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 01:56:45.975575 2026] [security2:error] [pid 69733:tid 69823] [client 34.62.247.170:44982] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al8KHbcVpHsAn-oUXuUTAAAAAEc"]
show less
Port Scan
🇺🇸
2602:80d:1008::61
17 hours ago
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::61 (Unknown): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::61 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 00:48:55.487299 2026] [security2:error] [pid 68223:tid 68360] [client 2602:80d:1008::61:7856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al76N6P8dDZG7BH75nLlXQAAADY"]
show less
Port Scan
🇺🇸
64.62.156.128
17 hours ago
(mod_security) mod_security (id:920350) triggered by 64.62.156.128 (US/United States/128.0-24.156.62 ...
show more
(mod_security) mod_security (id:920350) triggered by 64.62.156.128 (US/United States/128.0-24.156.62.64.in-addr.arpa): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 00:26:59.065136 2026] [security2:error] [pid 68223:tid 68334] [client 64.62.156.128:54333] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "al71E6P8dDZG7BH75nLVSwAAABw"]
show less
Port Scan
🇺🇸
64.62.156.122
17 hours ago
(mod_security) mod_security (id:920350) triggered by 64.62.156.122 (US/United States/122.0-24.156.62 ...
show more
(mod_security) mod_security (id:920350) triggered by 64.62.156.122 (US/United States/122.0-24.156.62.64.in-addr.arpa): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jul 21 00:23:10.305345 2026] [security2:error] [pid 66594:tid 66669] [client 64.62.156.122:38498] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al70LmaqelFqP7a5PMeGlgAAAEg"]
show less
Port Scan
🇬🇧
87.236.176.8
18 hours ago
(mod_security) mod_security (id:920350) triggered by 87.236.176.8 (GB/United Kingdom/r3-8-8.monitori ...
show more
(mod_security) mod_security (id:920350) triggered by 87.236.176.8 (GB/United Kingdom/r3-8-8.monitoring.internet-measurement.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 23:58:58.231191 2026] [security2:error] [pid 66594:tid 66712] [client 87.236.176.8:39491] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7ugmaqelFqP7a5PMdv_gAAAHM"]
show less
Port Scan
🇳🇱
104.248.80.170
18 hours ago
(mod_security) mod_security (id:920350) triggered by 104.248.80.170 (NL/The Netherlands/14549.forest ...
show more
(mod_security) mod_security (id:920350) triggered by 104.248.80.170 (NL/The Netherlands/14549.forestengine.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 23:48:54.323256 2026] [security2:error] [pid 66594:tid 66610] [remote 104.248.80.170:41754] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7sJmaqelFqP7a5PMdtewAAWg4"]
show less
Port Scan
🇳🇱
164.90.199.114
18 hours ago
(mod_security) mod_security (id:920350) triggered by 164.90.199.114 (NL/The Netherlands/14452.forest ...
show more
(mod_security) mod_security (id:920350) triggered by 164.90.199.114 (NL/The Netherlands/14452.forestengine.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 23:47:39.390316 2026] [security2:error] [pid 66594:tid 66674] [client 164.90.199.114:36002] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7r22aqelFqP7a5PMdtPgAAAE0"]
show less
Port Scan
🇺🇸
147.185.132.61
18 hours ago
(mod_security) mod_security (id:920280) triggered by 147.185.132.61 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920280) triggered by 147.185.132.61 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 23:45:31.260146 2026] [security2:error] [pid 66594:tid 66698] [client 147.185.132.61:56083] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7rW2aqelFqP7a5PMds4gAAAGU"]
show less
Port Scan
🇧🇪
34.78.135.163
18 hours ago
(ftpd) Failed FTP login from 34.78.135.163 (BE/Belgium/163.135.78.34.bc.googleusercontent.com): 1 in ...
show more
(ftpd) Failed FTP login from 34.78.135.163 (BE/Belgium/163.135.78.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 20 23:40:11 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
🇺🇸
107.155.48.46
18 hours ago
(mod_security) mod_security (id:920350) triggered by 107.155.48.46 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 107.155.48.46 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 23:25:39.739316 2026] [security2:error] [pid 66594:tid 66719] [client 107.155.48.46:56038] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "al7ms2aqelFqP7a5PMdcuQAAAHo"]
show less
Port Scan
🇧🇪
34.62.178.60
19 hours ago
(mod_security) mod_security (id:920350) triggered by 34.62.178.60 (BE/Belgium/60.178.62.34.bc.google ...
show more
(mod_security) mod_security (id:920350) triggered by 34.62.178.60 (BE/Belgium/60.178.62.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 23:00:21.793126 2026] [security2:error] [pid 64856:tid 64982] [client 34.62.178.60:49860] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7gxdDIUFsWUR_4fIiGdwAAACs"]
show less
Port Scan
🇳🇱
45.198.224.243
19 hours ago
(mod_security) mod_security (id:920350) triggered by 45.198.224.243 (SE/Sweden/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 45.198.224.243 (SE/Sweden/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 22:54:57.547873 2026] [security2:error] [pid 64856:tid 64940] [client 45.198.224.243:49842] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7fgdDIUFsWUR_4fIiE3QAAAAE"]
show less
Port Scan
🇷🇴
2.57.122.103
19 hours ago
(mod_security) mod_security (id:911100) triggered by 2.57.122.103 (NL/The Netherlands/-): 1 in the l ...
show more
(mod_security) mod_security (id:911100) triggered by 2.57.122.103 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 22:28:04.896409 2026] [security2:error] [pid 64856:tid 64946] [client 2.57.122.103:49696] ModSecurity: Access denied with code 406 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/etc/modsecurity.d/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/METHOD-ENFORCEMENT"] [tag "capec/1000/210/272/220/274"] [redacted] [uri "/"] [unique_id "al7ZNNDIUFsWUR_4fIh19gAAAAc"]
show less
Port Scan
🇨🇦
85.217.149.27
20 hours ago
(mod_security) mod_security (id:920350) triggered by 85.217.149.27 (CA/Canada/o028.scanner.modat.io) ...
show more
(mod_security) mod_security (id:920350) triggered by 85.217.149.27 (CA/Canada/o028.scanner.modat.io): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jul 20 22:15:50.843837 2026] [security2:error] [pid 64856:tid 64984] [client 85.217.149.27:49674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "al7WVtDIUFsWUR_4fIhpfwAAAC0"]
show less
Port Scan