🇧🇪
34.78.7.72
18 hours ago
(mod_security) mod_security (id:920350) triggered by 34.78.7.72 (BE/Belgium/72.7.78.34.bc.googleuser ...
show more
(mod_security) mod_security (id:920350) triggered by 34.78.7.72 (BE/Belgium/72.7.78.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 19:18:01.873768 2026] [security2:error] [pid 3223328:tid 3223442] [client 34.78.7.72:48334] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auPUKX8K8oDonOpIoUAEsQAAAB8"]
show less
Port Scan
🇳🇱
159.223.2.237
19 hours ago
(mod_security) mod_security (id:920350) triggered by 159.223.2.237 (NL/The Netherlands/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 159.223.2.237 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 18:18:04.050495 2026] [security2:error] [pid 1544855:tid 1544969] [client 159.223.2.237:36532] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auPGHDDU0T7rBPu7khtCvQAAAF8"]
show less
Port Scan
🇹🇼
198.235.24.74
19 hours ago
(mod_security) mod_security (id:920280) triggered by 198.235.24.74 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920280) triggered by 198.235.24.74 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 18:01:31.195706 2026] [security2:error] [pid 1544855:tid 1544999] [client 198.235.24.74:55930] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auPCOzDU0T7rBPu7khtA-QAAAH0"]
show less
Port Scan
🇺🇸
43.153.123.4
20 hours ago
(mod_security) mod_security (id:920210) triggered by 43.153.123.4 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:920210) triggered by 43.153.123.4 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 17:25:24.535119 2026] [security2:error] [pid 1544855:tid 1544987] [client 43.153.123.4:50992] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auO5xDDU0T7rBPu7khs8tQAAAHE"]
show less
Port Scan
🇺🇸
66.132.172.215
21 hours ago
(mod_security) mod_security (id:920350) triggered by 66.132.172.215 (US/United States/215.172.132.66 ...
show more
(mod_security) mod_security (id:920350) triggered by 66.132.172.215 (US/United States/215.172.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 16:47:38.040244 2026] [security2:error] [pid 1544855:tid 1544975] [client 66.132.172.215:27792] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auOw6jDU0T7rBPu7khs4qAAAAGU"]
show less
Port Scan
🇹🇼
198.235.24.86
22 hours ago
(mod_security) mod_security (id:920350) triggered by 198.235.24.86 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 198.235.24.86 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 15:14:03.402570 2026] [security2:error] [pid 1544855:tid 1544954] [client 198.235.24.86:59720] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auOa-zDU0T7rBPu7khsueQAAAFA"]
show less
Port Scan
🇫🇷
89.117.51.160
23 hours ago
(mod_security) mod_security (id:920350) triggered by 89.117.51.160 (US/United States/vmi1790462.cont ...
show more
(mod_security) mod_security (id:920350) triggered by 89.117.51.160 (US/United States/vmi1790462.contaboserver.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 14:53:42.057872 2026] [security2:error] [pid 1544855:tid 1544946] [client 89.117.51.160:35446] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/settings.php.save"] [unique_id "auOWNjDU0T7rBPu7khssRgAAAEg"]
show less
Port Scan
🇧🇪
35.195.79.129
23 hours ago
(ftpd) Failed FTP login from 35.195.79.129 (BE/Belgium/129.79.195.35.bc.googleusercontent.com): 1 in ...
show more
(ftpd) Failed FTP login from 35.195.79.129 (BE/Belgium/129.79.195.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 29 14:46:57 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
🇨🇭
107.189.13.11
23 hours ago
(ftpd) Failed FTP login from 107.189.13.11 (LU/Luxembourg/-): 1 in the last 3600 secs; Ports: *; Dir ...
show more
(ftpd) Failed FTP login from 107.189.13.11 (LU/Luxembourg/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 29 14:34:46 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [polycomftp]
show less
Port Scan
🇺🇸
44.220.185.100
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 44.220.185.100 (US/United States/scanner-44-220 ...
show more
(mod_security) mod_security (id:920350) triggered by 44.220.185.100 (US/United States/scanner-44-220-185-100.reposify.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 13:10:41.807405 2026] [security2:error] [pid 1544855:tid 1545001] [client 44.220.185.100:35390] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auN-ETDU0T7rBPu7khshqwAAAH8"]
show less
Port Scan
🇿🇦
203.123.87.2
29 Oct 2026
(eximsyntax) Exim syntax errors from 203.123.87.2 (ZA/South Africa/ecs-203-123-87-2.compute.hwclouds ...
show more
(eximsyntax) Exim syntax errors from 203.123.87.2 (ZA/South Africa/ecs-203-123-87-2.compute.hwclouds-dns.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2026-10-29 12:13:54 SMTP call from ecs-203-123-87-2.compute.hwclouds-dns.com [203.123.87.2] dropped: too many syntax or protocol errors (last command was "?", NULL)
show less
Port Scan
🇺🇸
192.155.90.220
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 192.155.90.220 (US/United States/bern.scan.buff ...
show more
(mod_security) mod_security (id:920350) triggered by 192.155.90.220 (US/United States/bern.scan.bufferover.run): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 12:04:58.640526 2026] [security2:error] [pid 2295373:tid 2295718] [client 192.155.90.220:29368] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNuqm0wqQMla56JUuaatgAAAAM"]
show less
Port Scan
🇺🇸
45.156.129.100
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 45.156.129.100 (US/United States/sh-chi-us-gp7- ...
show more
(mod_security) mod_security (id:920350) triggered by 45.156.129.100 (US/United States/sh-chi-us-gp7-wk142a.internet-census.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 11:38:46.016190 2026] [security2:error] [pid 2295373:tid 2295740] [client 45.156.129.100:15114] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNohm0wqQMla56JUuaZfgAAAA0"]
show less
Port Scan
🇭🇰
124.156.179.141
29 Oct 2026
(mod_security) mod_security (id:920210) triggered by 124.156.179.141 (HK/Hong Kong/-): 1 in the last ...
show more
(mod_security) mod_security (id:920210) triggered by 124.156.179.141 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:24:03.401208 2026] [security2:error] [pid 2295374:tid 2295875] [client 124.156.179.141:60134] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNXAxoCKb-Ova9bb6VHFAAAAGc"]
show less
Port Scan
🇺🇸
107.21.135.85
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 107.21.135.85 (US/United States/ec2-107-21-135- ...
show more
(mod_security) mod_security (id:920350) triggered by 107.21.135.85 (US/United States/ec2-107-21-135-85.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:04:09.098221 2026] [security2:error] [pid 2295373:tid 2295755] [client 107.21.135.85:64268] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNSWW0wqQMla56JUuaU9gAAABc"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::3b7
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::3b7 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::3b7 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:55.170253 2026] [security2:error] [pid 2295373:tid 2295728] [client 2a01:4020:31:0:102::3b7:9284] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/sse"] [unique_id "auNSD20wqQMla56JUuaU5QAAAAg"]
show less
Port Scan
🇬🇧
2a01:4020:1:1:102::1d5
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:1:1:102::1d5 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:1:1:102::1d5 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:42.060773 2026] [security2:error] [pid 2295373:tid 2295828] [client 2a01:4020:1:1:102::1d5:16413] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNSAm0wqQMla56JUuaU3wAAADk"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::1b
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::1b (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::1b (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.175740 2026] [security2:error] [pid 2295374:tid 2295881] [client 2a01:4020:31:0:102::1b:15974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "auNSBRoCKb-Ova9bb6VF-gAAAG0"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::564
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::564 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::564 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.169399 2026] [security2:error] [pid 2295374:tid 2295880] [client 2a01:4020:31:0:102::564:15526] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/api/mcp"] [unique_id "auNSBRoCKb-Ova9bb6VF-QAAAGw"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::7bd
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::7bd (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::7bd (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.169400 2026] [security2:error] [pid 2295373:tid 2295760] [client 2a01:4020:31:0:102::7bd:15698] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "auNSBW0wqQMla56JUuaU4QAAABs"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::293
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::293 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::293 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:44.833198 2026] [security2:error] [pid 2295374:tid 2295879] [client 2a01:4020:31:0:102::293:12822] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNSBBoCKb-Ova9bb6VF-AAAAGs"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::335
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::335 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::335 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 10:02:45.001699 2026] [security2:error] [pid 2295373:tid 2295742] [client 2a01:4020:31:0:102::335:12810] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "auNSBW0wqQMla56JUuaU4AAAAA4"]
show less
Port Scan
🇨🇭
213.167.227.217
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 213.167.227.217 (CH/Switzerland/34631.hostserv. ...
show more
(mod_security) mod_security (id:920350) triggered by 213.167.227.217 (CH/Switzerland/34631.hostserv.eu): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 09:21:36.950330 2026] [security2:error] [pid 2295374:tid 2295885] [client 213.167.227.217:44132] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auNIYBoCKb-Ova9bb6VDqQAAAHE"]
show less
Port Scan
🇺🇸
172.105.128.13
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 172.105.128.13 (US/United States/prague.scan.bu ...
show more
(mod_security) mod_security (id:920350) triggered by 172.105.128.13 (US/United States/prague.scan.bufferover.run): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:40:10.340892 2026] [security2:error] [pid 2295374:tid 2295838] [client 172.105.128.13:58436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auM-qhoCKb-Ova9bb6VBhgAAAEQ"]
show less
Port Scan
🇬🇧
5.226.140.29
29 Oct 2026
(mod_security) mod_security (id:920350) triggered by 5.226.140.29 (GB/United Kingdom/5-226-140-29.in ...
show more
(mod_security) mod_security (id:920350) triggered by 5.226.140.29 (GB/United Kingdom/5-226-140-29.infrawat.ch): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Oct 29 08:11:21.654730 2026] [security2:error] [pid 2295374:tid 2295865] [client 5.226.140.29:10270] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp/"] [unique_id "auM36RoCKb-Ova9bb6U_8gAAAF0"]
show less
Port Scan