|
🇵🇰
110.38.250.23
|
|
(mod_security) mod_security (id:920280) triggered by 110.38.250.23 (PK/Pakistan/GPONUser38250-23.wat ...
show more
(mod_security) mod_security (id:920280) triggered by 110.38.250.23 (PK/Pakistan/GPONUser38250-23.wateen.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 11:17:55.313503 2026] [security2:error] [pid 135159:tid 135258] [client 110.38.250.23:63073] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/boaform/admin/formLogin"] [unique_id "amDfI5ahJDI0oYPypbcxQwAAAFA"]
show less
|
Port Scan
|
|
🇺🇸
49.51.196.42
|
|
(mod_security) mod_security (id:920210) triggered by 49.51.196.42 (US/United States/-): 1 in the las ...
show more
(mod_security) mod_security (id:920210) triggered by 49.51.196.42 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 11:14:54.249195 2026] [security2:error] [pid 135159:tid 135265] [client 49.51.196.42:32952] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amDebpahJDI0oYPypbcu8QAAAFc"]
show less
|
Port Scan
|
|
🇯🇵
152.32.146.202
|
|
(mod_security) mod_security (id:920350) triggered by 152.32.146.202 (JP/Japan/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 152.32.146.202 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 11:00:36.870051 2026] [security2:error] [pid 135159:tid 135300] [client 152.32.146.202:55798] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amDbFJahJDI0oYPypbckugAAAHo"]
show less
|
Port Scan
|
|
🇬🇧
2a06:4883:9000::97
|
|
(mod_security) mod_security (id:920350) triggered by 2a06:4883:9000::97 (r4-151-97.monitoring.intern ...
show more
(mod_security) mod_security (id:920350) triggered by 2a06:4883:9000::97 (r4-151-97.monitoring.internet-measurement.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 10:46:27.311422 2026] [security2:error] [pid 135159:tid 135291] [client 2a06:4883:9000::97:38935] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amDXw5ahJDI0oYPypbchVQAAAHE"]
show less
|
Port Scan
|
|
🇬🇧
2a06:4883:5000::51
|
|
(mod_security) mod_security (id:920350) triggered by 2a06:4883:5000::51 (r4-81-51.monitoring.interne ...
show more
(mod_security) mod_security (id:920350) triggered by 2a06:4883:5000::51 (r4-81-51.monitoring.internet-measurement.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 10:35:52.323954 2026] [security2:error] [pid 135159:tid 135255] [client 2a06:4883:5000::51:54999] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amDVSJahJDI0oYPypbcesgAAAE0"]
show less
|
Port Scan
|
|
🇯🇵
8.209.236.193
|
|
(mod_security) mod_security (id:920350) triggered by 8.209.236.193 (JP/Japan/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 8.209.236.193 (JP/Japan/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 10:03:13.462083 2026] [security2:error] [pid 135159:tid 135288] [client 8.209.236.193:51020] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amDNoZahJDI0oYPypbcH7AAAAG4"]
show less
|
Port Scan
|
|
🇰🇪
197.248.233.55
|
|
(mod_security) mod_security (id:920350) triggered by 197.248.233.55 (KE/Kenya/197-248-233-55.safaric ...
show more
(mod_security) mod_security (id:920350) triggered by 197.248.233.55 (KE/Kenya/197-248-233-55.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 09:48:51.912817 2026] [security2:error] [pid 135159:tid 135294] [client 197.248.233.55:56472] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/wsman"] [unique_id "amDKQ5ahJDI0oYPypbcDFgAAAHQ"]
show less
|
Port Scan
|
|
🇷🇴
92.118.39.86
|
|
(mod_security) mod_security (id:913100) triggered by 92.118.39.86 (NL/The Netherlands/-): 1 in the l ...
show more
(mod_security) mod_security (id:913100) triggered by 92.118.39.86 (NL/The Netherlands/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 09:44:31.843195 2026] [security2:error] [pid 135159:tid 135260] [client 92.118.39.86:42904] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/op/7_md/9/1/2/3/4"] [unique_id "amDJP5ahJDI0oYPypbcCPwAAAFI"]
show less
|
Port Scan
|
|
🇺🇸
43.159.132.207
|
|
(mod_security) mod_security (id:920210) triggered by 43.159.132.207 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:920210) triggered by 43.159.132.207 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 09:23:58.143532 2026] [security2:error] [pid 131896:tid 131979] [client 43.159.132.207:56864] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amDEbg4BBWYBF6qHvo-r6QAAAAA"]
show less
|
Port Scan
|
|
🇺🇸
128.203.204.25
|
|
(mod_security) mod_security (id:913100) triggered by 128.203.204.25 (US/United States/azpdcg1tehht.s ...
show more
(mod_security) mod_security (id:913100) triggered by 128.203.204.25 (US/United States/azpdcg1tehht.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 09:13:09.873707 2026] [security2:error] [pid 131896:tid 131993] [client 128.203.204.25:43792] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/developmentserver/metadatauploader"] [unique_id "amDB5Q4BBWYBF6qHvo-kQQAAAA4"]
show less
|
Port Scan
|
|
🇺🇸
66.132.172.47
|
|
(mod_security) mod_security (id:920350) triggered by 66.132.172.47 (US/United States/47.172.132.66.c ...
show more
(mod_security) mod_security (id:920350) triggered by 66.132.172.47 (US/United States/47.172.132.66.censys-scanner.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 08:55:54.359800 2026] [security2:error] [pid 131896:tid 131981] [client 66.132.172.47:16436] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amC92g4BBWYBF6qHvo-Z-AAAAAI"]
show less
|
Port Scan
|
|
🇲🇳
180.149.126.8
|
|
(mod_security) mod_security (id:920350) triggered by 180.149.126.8 (MN/Mongolia/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920350) triggered by 180.149.126.8 (MN/Mongolia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 07:25:42.308858 2026] [security2:error] [pid 128185:tid 128320] [client 180.149.126.8:55285] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/stalker_portal/server/tools/auth_simple.php"] [unique_id "amCottJVvaq9ehlkjEjfOgAAAHQ"]
show less
|
Port Scan
|
|
🇺🇸
20.163.15.238
|
|
(mod_security) mod_security (id:913100) triggered by 20.163.15.238 (US/United States/azpdwsp7exl1.st ...
show more
(mod_security) mod_security (id:913100) triggered by 20.163.15.238 (US/United States/azpdwsp7exl1.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 07:14:57.332022 2026] [security2:error] [pid 128185:tid 128274] [client 20.163.15.238:42476] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/ReportServer"] [unique_id "amCmMdJVvaq9ehlkjEjXBQAAAEY"]
show less
|
Port Scan
|
|
🇻🇳
58.186.224.192
|
|
(mod_security) mod_security (id:920280) triggered by 58.186.224.192 (VN/Vietnam/-): 1 in the last 36 ...
show more
(mod_security) mod_security (id:920280) triggered by 58.186.224.192 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 07:08:41.818122 2026] [security2:error] [pid 128185:tid 128300] [client 58.186.224.192:56069] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amCkudJVvaq9ehlkjEjSxAAAAGA"]
show less
|
Port Scan
|
|
🇬🇧
64.227.35.6
|
|
(mod_security) mod_security (id:920350) triggered by 64.227.35.6 (GB/United Kingdom/-): 1 in the las ...
show more
(mod_security) mod_security (id:920350) triggered by 64.227.35.6 (GB/United Kingdom/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 04:43:54.366882 2026] [security2:error] [pid 124909:tid 125046] [client 64.227.35.6:60832] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amCCys5aeSZ1cZjU8ZSKjAAAADY"]
show less
|
Port Scan
|
|
🇨🇳
115.49.200.94
|
|
(mod_security) mod_security (id:920340) triggered by 115.49.200.94 (CN/China/hn.kd.ny.adsl): 1 in th ...
show more
(mod_security) mod_security (id:920340) triggered by 115.49.200.94 (CN/China/hn.kd.ny.adsl): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 04:27:59.222314 2026] [security2:error] [pid 124909:tid 125011] [client 115.49.200.94:55588] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "728"] [id "920340"] [msg "Content-Type header missing from request with non-zero Content-Length"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/GponForm/diag_Form"] [unique_id "amB_D85aeSZ1cZjU8ZSC0wAAABM"]
show less
|
Port Scan
|
|
🇺🇸
54.196.150.166
|
|
(mod_security) mod_security (id:920350) triggered by 54.196.150.166 (US/United States/ec2-54-196-150 ...
show more
(mod_security) mod_security (id:920350) triggered by 54.196.150.166 (US/United States/ec2-54-196-150-166.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 04:18:40.273792 2026] [security2:error] [pid 124909:tid 125049] [client 54.196.150.166:55856] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amB84M5aeSZ1cZjU8ZR6egAAADk"]
show less
|
Port Scan
|
|
🇺🇸
54.173.13.198
|
|
(mod_security) mod_security (id:920350) triggered by 54.173.13.198 (US/United States/ec2-54-173-13-1 ...
show more
(mod_security) mod_security (id:920350) triggered by 54.173.13.198 (US/United States/ec2-54-173-13-198.compute-1.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 04:18:39.966124 2026] [security2:error] [pid 124909:tid 125043] [client 54.173.13.198:23970] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/robots.txt"] [unique_id "amB8385aeSZ1cZjU8ZR6eAAAADM"]
show less
|
Port Scan
|
|
🇧🇪
34.156.197.78
|
|
(mod_security) mod_security (id:920350) triggered by 34.156.197.78 (BE/Belgium/78.197.156.34.bc.goog ...
show more
(mod_security) mod_security (id:920350) triggered by 34.156.197.78 (BE/Belgium/78.197.156.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 03:21:05.775661 2026] [security2:error] [pid 118059:tid 118431] [client 34.156.197.78:13674] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amBvYVDQCqfK8mRQeoxlkAAAAUA"]
show less
|
Port Scan
|
|
🇺🇸
20.169.104.255
|
|
(mod_security) mod_security (id:913100) triggered by 20.169.104.255 (US/United States/azpdwsrajvn8.s ...
show more
(mod_security) mod_security (id:913100) triggered by 20.169.104.255 (US/United States/azpdwsrajvn8.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 03:14:55.225794 2026] [security2:error] [pid 117991:tid 118462] [client 20.169.104.255:55042] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity.d/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [redacted] [uri "/"] [unique_id "amBt70ymiN-UhefCd2MmAQAAALo"]
show less
|
Port Scan
|
|
🇹🇼
198.235.24.39
|
|
(mod_security) mod_security (id:920350) triggered by 198.235.24.39 (US/United States/-): 1 in the la ...
show more
(mod_security) mod_security (id:920350) triggered by 198.235.24.39 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 02:22:33.053685 2026] [security2:error] [pid 117991:tid 118436] [client 198.235.24.39:58778] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amBhqUymiN-UhefCd2MaCAAAAKw"]
show less
|
Port Scan
|
|
🇧🇷
189.4.122.140
|
|
(mod_security) mod_security (id:920350) triggered by 189.4.122.140 (BR/Brazil/bd047a8c.virtua.com.br ...
show more
(mod_security) mod_security (id:920350) triggered by 189.4.122.140 (BR/Brazil/bd047a8c.virtua.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 01:53:26.333754 2026] [security2:error] [pid 118059:tid 118513] [client 189.4.122.140:8241] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/wp-json/batch/v1"] [unique_id "amBa1lDQCqfK8mRQeoxPNgAAAXw"]
show less
|
Port Scan
|
|
🇺🇸
2602:80d:1008::1e
|
|
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::1e (Unknown): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:920350) triggered by 2602:80d:1008::1e (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 01:48:25.164644 2026] [security2:error] [pid 118059:tid 118481] [client 2602:80d:1008::1e:24514] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted]"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amBZqVDQCqfK8mRQeoxOwAAAAVw"]
show less
|
Port Scan
|
|
🇯🇵
13.231.27.88
|
|
(mod_security) mod_security (id:911100) triggered by 13.231.27.88 (JP/Japan/ec2-13-231-27-88.ap-nort ...
show more
(mod_security) mod_security (id:911100) triggered by 13.231.27.88 (JP/Japan/ec2-13-231-27-88.ap-northeast-1.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 01:07:55.522279 2026] [security2:error] [pid 117991:tid 118401] [client 13.231.27.88:46846] ModSecurity: Access denied with code 406 (phase 1). Match of "within %{tx.allowed_methods}" against "REQUEST_METHOD" required. [file "/etc/modsecurity.d/REQUEST-911-METHOD-ENFORCEMENT.conf"] [line "44"] [id "911100"] [msg "Method is not allowed by policy"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/METHOD-ENFORCEMENT"] [tag "capec/1000/210/272/220/274"] [redacted] [uri "/"] [unique_id "amBQK0ymiN-UhefCd2MDowAAAI0"]
show less
|
Port Scan
|
|
🇸🇬
134.209.97.194
|
|
(mod_security) mod_security (id:920350) triggered by 134.209.97.194 (SG/Singapore/-): 1 in the last ...
show more
(mod_security) mod_security (id:920350) triggered by 134.209.97.194 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jul 22 00:28:52.820134 2026] [security2:error] [pid 118059:tid 118512] [client 134.209.97.194:60046] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "amBHBFDQCqfK8mRQeow40QAAAXs"]
show less
|
Port Scan
|