🇯🇵
164.52.24.185
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 164.52.24.185 (JP/Japan/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 164.52.24.185 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 10:50:27.426805 2026] [security2:error] [pid 3746617:tid 3747096] [client 164.52.24.185:51815] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auixQ2tZ24D7imyWNkBPqwAAALQ"]
show less
Port Scan
🇺🇸
20.80.75.45
02 Nov 2026
(mod_security) mod_security (id:913100) triggered by 20.80.75.45 (US/United States/-): 1 in the last ...
show more
(mod_security) mod_security (id:913100) triggered by 20.80.75.45 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 10:46:10.447552 2026] [security2:error] [pid 3746617:tid 3747103] [client 20.80.75.45:47608] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "auiwQmtZ24D7imyWNkBPOgAAALo"]
show less
Port Scan
🇬🇧
167.99.192.215
02 Nov 2026
(ftpd) Failed FTP login from 167.99.192.215 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: * ...
show more
(ftpd) Failed FTP login from 167.99.192.215 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 2 10:34:50 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
🇬🇧
31.171.130.73
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 31.171.130.73 (GB/United Kingdom/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 31.171.130.73 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 10:22:33.496233 2026] [security2:error] [pid 3746617:tid 3747106] [client 31.171.130.73:29145] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/conf/.env"] [unique_id "auiquWtZ24D7imyWNkBNBQAAAL0"]
show less
Port Scan
🇬🇧
31.171.130.93
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 31.171.130.93 (GB/United Kingdom/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 31.171.130.93 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 10:22:33.337278 2026] [security2:error] [pid 3746617:tid 3746971] [client 31.171.130.93:32097] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.env"] [unique_id "auiquWtZ24D7imyWNkBNBAAAAJA"]
show less
Port Scan
🇳🇱
77.239.124.175
02 Nov 2026
(sshd) Failed SSH login from 77.239.124.175 (FR/France/-): 1 in the last 3600 secs; Ports: *; Direct ...
show more
(sshd) Failed SSH login from 77.239.124.175 (FR/France/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 2 10:16:51 web sshd[2315215]: Invalid user docker from 77.239.124.175 port 36446
show less
Port Scan
🇹🇷
213.250.140.76
02 Nov 2026
(ftpd) Failed FTP login from 213.250.140.76 (TR/Turkey/ecs-213-250-140-76.compute.hwclouds-dns.com): ...
show more
(ftpd) Failed FTP login from 213.250.140.76 (TR/Turkey/ecs-213-250-140-76.compute.hwclouds-dns.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 2 10:10:22 web pure-ftpd: ([email protected] ) [WARNING] Authentication failed for user [anonymous]
show less
Port Scan
🇭🇰
5.187.38.30
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 5.187.38.30 (HK/Hong Kong/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 5.187.38.30 (HK/Hong Kong/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 10:02:35.871916 2026] [security2:error] [pid 3746598:tid 3747119] [client 5.187.38.30:49778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/SDK/webLanguage"] [unique_id "auimCzWkmEUqdVrhC_0nXAAAAFw"]
show less
Port Scan
🇳🇱
178.62.214.238
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 178.62.214.238 (NL/The Netherlands/119726.fores ...
show more
(mod_security) mod_security (id:920350) triggered by 178.62.214.238 (NL/The Netherlands/119726.forestengine.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 09:25:00.598958 2026] [security2:error] [pid 3746598:tid 3747063] [client 178.62.214.238:50662] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auidPDWkmEUqdVrhC_0lSwAAAEI"]
show less
Port Scan
🇺🇸
54.173.150.134
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 54.173.150.134 (US/United States/ec2-54-173-150 ...
show more
(mod_security) mod_security (id:920350) triggered by 54.173.150.134 (US/United States/ec2-54-173-150-134.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 09:04:45.154164 2026] [security2:error] [pid 3746598:tid 3747148] [client 54.173.150.134:17178] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auiYfTWkmEUqdVrhC_0jTwAAAHY"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::144
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::144 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::144 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 08:59:44.527631 2026] [security2:error] [pid 3746617:tid 3747108] [client 2a01:4020:31:0:102::144:10740] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]:80"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/api/getData"] [unique_id "auiXUGtZ24D7imyWNkBIbAAAAL8"]
show less
Port Scan
🇳🇱
2a01:4020:2:b:101::ef
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:2:b:101::ef (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:2:b:101::ef (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 08:59:29.167366 2026] [security2:error] [pid 3746617:tid 3747107] [client 2a01:4020:2:b:101::ef:27402] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auiXQWtZ24D7imyWNkBIaQAAAL4"]
show less
Port Scan
🇧🇷
177.10.89.105
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 177.10.89.105 (BR/Brazil/static-105.89.10.177.v ...
show more
(mod_security) mod_security (id:920350) triggered by 177.10.89.105 (BR/Brazil/static-105.89.10.177.vm.lgs.dc.atplus.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 08:59:25.786666 2026] [security2:error] [pid 3746598:tid 3747080] [client 177.10.89.105:50132] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auiXPTWkmEUqdVrhC_0jCwAAAFM"]
show less
Port Scan
🇺🇸
170.106.72.178
02 Nov 2026
(mod_security) mod_security (id:920210) triggered by 170.106.72.178 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920210) triggered by 170.106.72.178 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 08:25:31.513450 2026] [security2:error] [pid 3746617:tid 3747105] [client 170.106.72.178:46974] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auiPS2tZ24D7imyWNkBFvAAAALw"]
show less
Port Scan
🇨🇭
91.90.122.155
02 Nov 2026
(mod_security) mod_security (id:920280) triggered by 91.90.122.155 (LI/Liechtenstein/-): 1 in the la ...
show more
(mod_security) mod_security (id:920280) triggered by 91.90.122.155 (LI/Liechtenstein/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 08:02:03.296921 2026] [security2:error] [pid 3746598:tid 3747157] [client 91.90.122.155:14056] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/nice%20ports%2C/Tri%6Eity.txt%2ebak"] [unique_id "auiJyzWkmEUqdVrhC_0ewAAAAH8"]
show less
Port Scan
🇺🇸
2602:80d:1008::15
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::15 (Unknown): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::15 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 05:53:47.956664 2026] [security2:error] [pid 3746617:tid 3747081] [client 2602:80d:1008::15:62070] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auhru2tZ24D7imyWNkA3FwAAAKc"]
show less
Port Scan
🇸🇬
43.156.232.154
02 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.156.232.154 (SG/Singapore/-): 1 in the last ...
show more
(mod_security) mod_security (id:920210) triggered by 43.156.232.154 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 05:50:40.394214 2026] [security2:error] [pid 3746598:tid 3747131] [client 43.156.232.154:40814] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auhrADWkmEUqdVrhC_0ONAAAAGY"]
show less
Port Scan
🇺🇸
34.94.86.158
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 34.94.86.158 (US/United States/158.86.94.34.bc. ...
show more
(mod_security) mod_security (id:920350) triggered by 34.94.86.158 (US/United States/158.86.94.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 05:01:53.289040 2026] [security2:error] [pid 3746598:tid 3747150] [client 34.94.86.158:9394] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auhfkTWkmEUqdVrhC_0KTgAAAHg"]
show less
Port Scan
🇲🇾
47.250.82.134
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 47.250.82.134 (MY/Malaysia/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 47.250.82.134 (MY/Malaysia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 04:34:29.084904 2026] [security2:error] [pid 3746617:tid 3747100] [client 47.250.82.134:58586] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auhZJWtZ24D7imyWNkAxMwAAALc"]
show less
Port Scan
🇺🇸
43.153.48.240
02 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.153.48.240 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 43.153.48.240 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 04:07:55.772831 2026] [security2:error] [pid 3746617:tid 3747082] [client 43.153.48.240:42324] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auhS62tZ24D7imyWNkAvogAAAKg"]
show less
Port Scan
🇺🇸
20.65.146.34
02 Nov 2026
(mod_security) mod_security (id:913100) triggered by 20.65.146.34 (US/United States/azpdsgay27l9.str ...
show more
(mod_security) mod_security (id:913100) triggered by 20.65.146.34 (US/United States/azpdsgay27l9.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 03:37:31.067567 2026] [security2:error] [pid 3746617:tid 3747082] [client 20.65.146.34:33064] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "auhLy2tZ24D7imyWNkAs1QAAAKg"]
show less
Port Scan
🇩🇪
47.254.177.97
02 Nov 2026
(sshd) Failed SSH login from 47.254.177.97 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direct ...
show more
(sshd) Failed SSH login from 47.254.177.97 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 2 02:30:55 web sshd[188493]: Invalid user from 47.254.177.97 port 15100
show less
Port Scan
🇧🇪
35.210.138.136
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 35.210.138.136 (BE/Belgium/136.138.210.35.bc.go ...
show more
(mod_security) mod_security (id:920350) triggered by 35.210.138.136 (BE/Belgium/136.138.210.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 02:09:52.114100 2026] [security2:error] [pid 3746598:tid 3747132] [client 35.210.138.136:21616] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aug3QDWkmEUqdVrhC_39iAAAAGc"]
show less
Port Scan
🇺🇸
37.19.197.153
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 37.19.197.153 (US/United States/unn-37-19-197-1 ...
show more
(mod_security) mod_security (id:920350) triggered by 37.19.197.153 (US/United States/unn-37-19-197-153.datapacket.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 02:02:26.328570 2026] [security2:error] [pid 3746617:tid 3747081] [client 37.19.197.153:30225] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aug1gmtZ24D7imyWNkAnvwAAAKc"]
show less
Port Scan
🇧🇷
205.210.31.214
02 Nov 2026
(mod_security) mod_security (id:920280) triggered by 205.210.31.214 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920280) triggered by 205.210.31.214 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Nov 02 01:30:10.843600 2026] [security2:error] [pid 3746617:tid 3747082] [client 205.210.31.214:55841] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "augt8mtZ24D7imyWNkAmIgAAAKg"]
show less
Port Scan