🇿🇦
41.78.245.46
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 41.78.245.46 (ZA/South Africa/-): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 41.78.245.46 (ZA/South Africa/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 20:17:10.604942 2026] [security2:error] [pid 2001244:tid 2001361] [client 41.78.245.46:36853] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aufkliFsKVnhSx-YJ6_yWwAAAGI"]
show less
Port Scan
🇧🇩
103.167.40.135
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 103.167.40.135 (BD/Bangladesh/-): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 103.167.40.135 (BD/Bangladesh/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 20:15:05.919418 2026] [security2:error] [pid 2001244:tid 2001343] [client 103.167.40.135:56594] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aufkGSFsKVnhSx-YJ6_yIwAAAFA"]
show less
Port Scan
🇯🇵
43.133.220.37
02 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.133.220.37 (JP/Japan/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920210) triggered by 43.133.220.37 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 19:43:38.101733 2026] [security2:error] [pid 2001244:tid 2001355] [client 43.133.220.37:60672] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aufcuiFsKVnhSx-YJ6_tsQAAAFw"]
show less
Port Scan
🇷🇴
95.133.167.25
02 Nov 2026
(mod_security) mod_security (id:920350) triggered by 95.133.167.25 (RO/Romania/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920350) triggered by 95.133.167.25 (RO/Romania/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 19:29:48.127323 2026] [security2:error] [pid 2001244:tid 2001371] [client 95.133.167.25:23202] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aufZfCFsKVnhSx-YJ6_sIwAAAGw"]
show less
Port Scan
🇵🇰
139.135.45.175
01 Nov 2026
(mod_security) mod_security (id:920280) triggered by 139.135.45.175 (PK/Pakistan/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:920280) triggered by 139.135.45.175 (PK/Pakistan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 18:24:41.937995 2026] [security2:error] [pid 2001244:tid 2001364] [client 139.135.45.175:60859] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/setup.cgi"] [unique_id "aufKOSFsKVnhSx-YJ6_fpwAAAGU"]
show less
Port Scan
🇵🇱
95.214.52.228
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 95.214.52.228 (PL/Poland/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 95.214.52.228 (PL/Poland/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 17:35:55.401194 2026] [security2:error] [pid 1381218:tid 1381348] [client 95.214.52.228:45772] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aue-y3q9zoSMF7A26GsEBgAAAC8"]
show less
Port Scan
🇩🇪
43.131.26.226
01 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.131.26.226 (DE/Germany/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920210) triggered by 43.131.26.226 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 17:25:20.309566 2026] [security2:error] [pid 1381218:tid 1381355] [client 43.131.26.226:35608] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aue8UHq9zoSMF7A26GsBkQAAADY"]
show less
Port Scan
🇬🇧
78.153.140.39
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 78.153.140.39 (GB/United Kingdom/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 78.153.140.39 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 16:46:17.412464 2026] [security2:error] [pid 1381218:tid 1381306] [client 78.153.140.39:52508] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/.env"] [unique_id "auezKXq9zoSMF7A26Gv40AAAAAU"]
show less
Port Scan
🇺🇸
20.65.202.124
01 Nov 2026
(mod_security) mod_security (id:913100) triggered by 20.65.202.124 (US/United States/azpdssx1mt2w.st ...
show more
(mod_security) mod_security (id:913100) triggered by 20.65.202.124 (US/United States/azpdssx1mt2w.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 16:36:38.626489 2026] [security2:error] [pid 1381218:tid 1381329] [client 20.65.202.124:43542] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/actuator/health"] [unique_id "auew5nq9zoSMF7A26Gv33AAAABw"]
show less
Port Scan
🇦🇺
170.64.166.144
01 Nov 2026
(mod_security) mod_security (id:913100) triggered by 170.64.166.144 (AU/Australia/-): 1 in the last ...
show more
(mod_security) mod_security (id:913100) triggered by 170.64.166.144 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 16:35:15.768965 2026] [security2:error] [pid 1381218:tid 1381321] [client 170.64.166.144:35468] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "auewk3q9zoSMF7A26Gv3tAAAABQ"]
show less
Port Scan
🇳🇱
145.223.59.131
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 145.223.59.131 (NL/The Netherlands/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 145.223.59.131 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 16:09:46.580806 2026] [security2:error] [pid 1381218:tid 1381360] [client 145.223.59.131:57777] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aueqmnq9zoSMF7A26GvzsQAAADs"]
show less
Port Scan
🇺🇸
66.132.186.174
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 66.132.186.174 (US/United States/174.186.132.66 ...
show more
(mod_security) mod_security (id:920350) triggered by 66.132.186.174 (US/United States/174.186.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 15:54:43.113326 2026] [security2:error] [pid 1381218:tid 1381306] [client 66.132.186.174:43246] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "auenE3q9zoSMF7A26GvxMAAAAAU"]
show less
Port Scan
🇫🇮
193.187.110.160
01 Nov 2026
(sshd) Failed SSH login from 193.187.110.160 (TR/Turkey/-): 1 in the last 3600 secs; Ports: *; Direc ...
show more
(sshd) Failed SSH login from 193.187.110.160 (TR/Turkey/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 1 15:47:32 web sshd[1440572]: Invalid user status from 193.187.110.160 port 21632
show less
Port Scan
🇲🇳
180.149.125.171
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 180.149.125.171 (MN/Mongolia/-): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 180.149.125.171 (MN/Mongolia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 15:44:03.945413 2026] [security2:error] [pid 1381218:tid 1381325] [client 180.149.125.171:10673] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/stalker_portal/server/tools/auth_simple.php"] [unique_id "auekk3q9zoSMF7A26Gvu4QAAABg"]
show less
Port Scan
🇳🇱
85.11.167.136
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 85.11.167.136 (NL/The Netherlands/-): 1 in the ...
show more
(mod_security) mod_security (id:920350) triggered by 85.11.167.136 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 14:35:28.588362 2026] [security2:error] [pid 2502897:tid 2503401] [client 85.11.167.136:40148] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aueUgICWZ81ICb7UEm_EIgAAAKs"]
show less
Port Scan
🇲🇳
180.149.126.11
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 180.149.126.11 (MN/Mongolia/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:920350) triggered by 180.149.126.11 (MN/Mongolia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 13:52:04.036787 2026] [security2:error] [pid 2502896:tid 2503148] [client 180.149.126.11:25121] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/c/"] [unique_id "aueKVE_3ieHo3sUbMhfr4AAAAEA"]
show less
Port Scan
🇳🇱
193.47.62.29
01 Nov 2026
(mod_security) mod_security (id:930130) triggered by 193.47.62.29 (AD/Andorra/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:930130) triggered by 193.47.62.29 (AD/Andorra/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 13:03:07.441127 2026] [security2:error] [pid 2502897:tid 2503391] [client 193.47.62.29:57620] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".env" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.env"] [unique_id "aud-24CWZ81ICb7UEm-9bwAAAKE"]
show less
Port Scan
🇺🇸
20.65.145.128
01 Nov 2026
(mod_security) mod_security (id:913100) triggered by 20.65.145.128 (US/United States/azpdss54iave.st ...
show more
(mod_security) mod_security (id:913100) triggered by 20.65.145.128 (US/United States/azpdss54iave.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 12:51:56.465517 2026] [security2:error] [pid 2502896:tid 2503162] [client 20.65.145.128:60976] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "aud8PE_3ieHo3sUbMhfoFgAAAEY"]
show less
Port Scan
🇺🇸
43.130.174.37
01 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.130.174.37 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920210) triggered by 43.130.174.37 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 12:47:30.120686 2026] [security2:error] [pid 2502897:tid 2503377] [client 43.130.174.37:41042] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aud7MoCWZ81ICb7UEm-8VAAAAJM"]
show less
Port Scan
🇺🇸
147.185.132.16
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 147.185.132.16 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920350) triggered by 147.185.132.16 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 11:57:51.997322 2026] [security2:error] [pid 2502897:tid 2503389] [client 147.185.132.16:65406] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "audvj4CWZ81ICb7UEm-4XQAAAJ8"]
show less
Port Scan
🇺🇸
109.105.209.85
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 109.105.209.85 (US/United States/zl-laxk-us-gp7 ...
show more
(mod_security) mod_security (id:920350) triggered by 109.105.209.85 (US/United States/zl-laxk-us-gp7-wk123d.internet-census.org): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 11:55:07.150322 2026] [security2:error] [pid 2502896:tid 2503212] [client 109.105.209.85:50506] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "audu60_3ieHo3sUbMhfkmwAAAF0"]
show less
Port Scan
🇮🇩
43.173.1.69
01 Nov 2026
(mod_security) mod_security (id:920210) triggered by 43.173.1.69 (ID/Indonesia/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:920210) triggered by 43.173.1.69 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 10:30:54.141913 2026] [security2:error] [pid 2502897:tid 2503411] [client 43.173.1.69:40342] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "audbLoCWZ81ICb7UEm-yagAAALU"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::13
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::13 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::13 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 09:08:18.265985 2026] [security2:error] [pid 2502896:tid 2503178] [client 2a01:4020:31:0:102::13:9408] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/favicon.ico"] [unique_id "audH0k_3ieHo3sUbMhfa0AAAAE4"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::d8
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::d8 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::d8 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 09:08:18.433393 2026] [security2:error] [pid 2502896:tid 2503184] [client 2a01:4020:31:0:102::d8:11370] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/mcp"] [unique_id "audH0k_3ieHo3sUbMhfa0gAAAFA"]
show less
Port Scan
🇩🇪
2a01:4020:31:0:102::158
01 Nov 2026
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::158 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 2a01:4020:31:0:102::158 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sun Nov 01 09:08:18.098508 2026] [security2:error] [pid 2502897:tid 2503386] [client 2a01:4020:31:0:102::158:7306] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.28.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "audH0oCWZ81ICb7UEm-tRAAAAJw"]
show less
Port Scan