|
🇳🇱
80.82.64.25
|
|
80.82.64.25 - - [05/Sep/2026:20:37:35 -0600] "GET / HTTP/1.1" 400 4585 "-" "-"
...
|
Bad Web Bot
|
|
🇮🇩
43.173.1.57
|
|
[Sat Sep 05 20:18:47.204204 2026] [security2:error] [pid 931022:tid 931022] [client 43.173.1.57:5980 ...
show more
[Sat Sep 05 20:18:47.204204 2026] [security2:error] [pid 931022:tid 931022] [client 43.173.1.57:59804] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzNh0sHzIvNgnmQFtXcVgAAABY"]
[Sat Sep 05 20:18:47.204340 2026] [security2:error] [pid 931022:tid 931022] [client 43.173.1.57:59804] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/mo
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇨🇳
123.160.223.75
|
|
[Sat Sep 05 20:17:56.777050 2026] [security2:error] [pid 931022:tid 931022] [client 123.160.223.75:5 ...
show more
[Sat Sep 05 20:17:56.777050 2026] [security2:error] [pid 931022:tid 931022] [client 123.160.223.75:56180] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzNVEsHzIvNgnmQFtXcVQAAABY"]
[Sat Sep 05 20:17:56.779348 2026] [security2:error] [pid 931022:tid 931022] [client 123.160.223.75:56180] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇸🇬
47.84.204.223
|
|
[Sat Sep 05 20:17:35.650764 2026] [security2:error] [pid 931019:tid 931019] [client 47.84.204.223:14 ...
show more
[Sat Sep 05 20:17:35.650764 2026] [security2:error] [pid 931019:tid 931019] [client 47.84.204.223:14190] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:443"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apzNP_lhEtPMhuD-ERx9LAAAABM"]
[Sat Sep 05 20:17:35.653398 2026] [security2:error] [pid 931019:tid 931019] [client 47.84.204.223:14190] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "9801
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
172.190.100.178
|
|
[Sat Sep 05 20:12:06.430674 2026] [security2:error] [pid 931033:tid 931033] [client 172.190.100.178: ...
show more
[Sat Sep 05 20:12:06.430674 2026] [security2:error] [pid 931033:tid 931033] [client 172.190.100.178:48528] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/crs/current/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [hostname "186.32.240.17"] [uri "/ReportServer"] [unique_id "apzL9uxTle_W8N0flejaOAAAAB4"]
[Sat Sep 05 20:12:06.430861 2026] [security2:error] [pid 931033:tid 931033] [client 172.190.100.178:48528] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇸🇬
43.156.37.91
|
|
[Sat Sep 05 19:38:16.781120 2026] [security2:error] [pid 931036:tid 931036] [client 43.156.37.91:502 ...
show more
[Sat Sep 05 19:38:16.781120 2026] [security2:error] [pid 931036:tid 931036] [client 43.156.37.91:50210] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "robertomurillo.net"] [uri "/"] [unique_id "apzECOZIu628ETbPEPjzfQAAACE"]
[Sat Sep 05 19:38:16.783121 2026] [security2:error] [pid 931036:tid 931036] [client 43.156.37.91:50210] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
34.24.106.101
|
|
[Sat Sep 05 19:30:13.148937 2026] [security2:error] [pid 910217:tid 910217] [client 34.24.106.101:44 ...
show more
[Sat Sep 05 19:30:13.148937 2026] [security2:error] [pid 910217:tid 910217] [client 34.24.106.101:44328] ModSecurity: Warning. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1146"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇸🇬
43.156.228.27
|
|
43.156.228.27 - - [05/Sep/2026:19:18:14 -0600] "GET / HTTP/1.0" 400 744 "-" "-"
...
|
Bad Web Bot
|
|
🇺🇸
172.190.118.21
|
|
[Sat Sep 05 19:15:10.648775 2026] [security2:error] [pid 914985:tid 914985] [client 172.190.118.21:3 ...
show more
[Sat Sep 05 19:15:10.648775 2026] [security2:error] [pid 914985:tid 914985] [client 172.190.118.21:37502] ModSecurity: Warning. Matched phrase "zgrab" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/crs/current/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "56"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/SCANNER-DETECTION"] [tag "capec/1000/118/224/541/310"] [hostname "186.32.240.17"] [uri "/hudson"] [unique_id "apy-nmDNlh6USKuue6PjCwAAAAU"]
[Sat Sep 05 19:15:10.648970 2026] [security2:error] [pid 914985:tid 914985] [client 172.190.118.21:37502] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" a
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇷
16.5.0.254
|
|
[Sat Sep 05 19:00:47.634039 2026] [security2:error] [pid 910212:tid 910212] [client 16.5.0.254:47308 ...
show more
[Sat Sep 05 19:00:47.634039 2026] [security2:error] [pid 910212:tid 910212] [client 16.5.0.254:47308] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "cursos.robertomurillo.net"] [uri "/"] [unique_id "apy7P_TGDA08985-A4dyygAAAAI"]
[Sat Sep 05 19:00:47.635514 2026] [security2:error] [pid 910212:tid 910212] [client 16.5.0.254:47308] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [msg "Anomaly Scores: (Inbound Scores: blocking=5, detection=5, per_pl=5-0-0-0, thresh
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇵🇱
151.115.100.37
|
|
151.115.100.37 - - [05/Sep/2026:18:43:15 -0600] "GET / HTTP/1.0" 400 744 "-" "-"
...
|
Bad Web Bot
|
|
🇮🇩
103.46.186.148
|
|
[Sat Sep 05 18:29:10.543748 2026] [security2:error] [pid 914805:tid 914805] [client 103.46.186.148:3 ...
show more
[Sat Sep 05 18:29:10.543748 2026] [security2:error] [pid 914805:tid 914805] [client 103.46.186.148:38966] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh"] [unique_id "apyz1rsMHF8N9fr4TdqutAAAAAQ"]
[Sat Sep 05 18:29:10.543956 2026] [security2:error] [pid 914805:tid 914805] [client 103.46.186.148:38966] ModSecurity: Warning. Match of "within %{tx.allowed_request_content_type}" against "TX
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇹🇼
198.235.24.94
|
|
[Sat Sep 05 18:15:18.765410 2026] [security2:error] [pid 910217:tid 910217] [client 198.235.24.94:57 ...
show more
[Sat Sep 05 18:15:18.765410 2026] [security2:error] [pid 910217:tid 910217] [client 198.235.24.94:57570] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apywlukccvE86zo2Q36KJwAAAAY"]
[Sat Sep 05 18:15:18.856008 2026] [security2:error] [pid 910217:tid 910217] [client 198.235.24.94:57570] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "98017
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇹🇼
198.235.24.14
|
|
[Sat Sep 05 18:15:17.689457 2026] [security2:error] [pid 914805:tid 914805] [client 198.235.24.14:63 ...
show more
[Sat Sep 05 18:15:17.689457 2026] [security2:error] [pid 914805:tid 914805] [client 198.235.24.14:63970] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/wp-json/"] [unique_id "apywlbsMHF8N9fr4TdqupwAAAAQ"]
[Sat Sep 05 18:15:17.788921 2026] [security2:error] [pid 914805:tid 914805] [client 198.235.24.14:63970] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [i
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
147.185.132.85
|
|
[Sat Sep 05 18:14:58.203170 2026] [security2:error] [pid 914985:tid 914985] [client 147.185.132.85:6 ...
show more
[Sat Sep 05 18:14:58.203170 2026] [security2:error] [pid 914985:tid 914985] [client 147.185.132.85:64768] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/wp-login.php"] [unique_id "apywgmDNlh6USKuue6Pi0gAAAAU"]
[Sat Sep 05 18:14:58.300162 2026] [security2:error] [pid 914985:tid 914985] [client 147.185.132.85:64768] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "9
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
205.210.31.54
|
|
[Sat Sep 05 18:14:54.636871 2026] [security2:error] [pid 905495:tid 905495] [client 205.210.31.54:59 ...
show more
[Sat Sep 05 18:14:54.636871 2026] [security2:error] [pid 905495:tid 905495] [client 205.210.31.54:59108] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/xmlrpc.php"] [unique_id "apywfoI4SGJhWJwwyu-nFgAAAAM"]
[Sat Sep 05 18:14:54.638060 2026] [security2:error] [pid 905495:tid 905495] [client 205.210.31.54:59108] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇺🇸
147.185.132.246
|
|
[Sat Sep 05 18:14:52.596819 2026] [security2:error] [pid 910224:tid 910224] [client 147.185.132.246: ...
show more
[Sat Sep 05 18:14:52.596819 2026] [security2:error] [pid 910224:tid 910224] [client 147.185.132.246:57436] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/wp-json/wp/v2/users"] [unique_id "apywfOgNPCUs41CpQj-tggAAAAs"]
[Sat Sep 05 18:14:52.788296 2026] [security2:error] [pid 910224:tid 910224] [client 147.185.132.246:57436] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇨🇳
111.7.96.153
|
|
[Sat Sep 05 18:12:43.108577 2026] [security2:error] [pid 910225:tid 910225] [client 111.7.96.153:214 ...
show more
[Sat Sep 05 18:12:43.108577 2026] [security2:error] [pid 910225:tid 910225] [client 111.7.96.153:21474] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apyv-yfFPg4IIBBZdQtnKAAAAAw"]
[Sat Sep 05 18:12:43.111234 2026] [security2:error] [pid 910225:tid 910225] [client 111.7.96.153:21474] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇩🇪
47.245.142.53
|
|
[Sat Sep 05 18:12:20.610196 2026] [security2:error] [pid 910224:tid 910224] [client 47.245.142.53:57 ...
show more
[Sat Sep 05 18:12:20.610196 2026] [security2:error] [pid 910224:tid 910224] [client 47.245.142.53:57356] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17:80"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apyv5OgNPCUs41CpQj-tbwAAAAs"]
[Sat Sep 05 18:12:20.616480 2026] [security2:error] [pid 910224:tid 910224] [client 47.245.142.53:57356] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "98017
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇩🇪
43.157.20.63
|
|
[Sat Sep 05 18:10:49.086601 2026] [security2:error] [pid 904725:tid 904725] [client 43.157.20.63:432 ...
show more
[Sat Sep 05 18:10:49.086601 2026] [security2:error] [pid 904725:tid 904725] [client 43.157.20.63:43250] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "fotos.robertomurillo.net"] [uri "/"] [unique_id "apyviaIqMk8mi2W98w4OVQAAABE"]
[Sat Sep 05 18:10:49.088652 2026] [security2:error] [pid 904725:tid 904725] [client 43.157.20.63:43250] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇪
198.235.24.208
|
|
[Sat Sep 05 18:02:53.042756 2026] [security2:error] [pid 910219:tid 910219] [client 198.235.24.208:5 ...
show more
[Sat Sep 05 18:02:53.042756 2026] [security2:error] [pid 910219:tid 910219] [client 198.235.24.208:50171] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "566"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "cursos.robertomurillo.net"] [uri "/"] [unique_id "apytrUoMh3ONy-bZU6iupgAAAAg"]
[Sat Sep 05 18:02:53.044407 2026] [security2:error] [pid 910219:tid 910219] [client 198.235.24.208:50171] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [msg "Anomaly Scores: (Inbound Scores: blocking=5, detection=5, per_pl=5-0-0-0
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇧🇷
43.157.172.39
|
|
[Sat Sep 05 17:56:33.098295 2026] [security2:error] [pid 910220:tid 910220] [client 43.157.172.39:46 ...
show more
[Sat Sep 05 17:56:33.098295 2026] [security2:error] [pid 910220:tid 910220] [client 43.157.172.39:46280] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apysMWsOy5YiL0RrEUMuYgAAAAo"]
[Sat Sep 05 17:56:33.098442 2026] [security2:error] [pid 910220:tid 910220] [client 43.157.172.39:46280] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/et
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇨🇳
49.232.104.223
|
|
[Sat Sep 05 17:54:58.928939 2026] [security2:error] [pid 905495:tid 905495] [client 49.232.104.223:3 ...
show more
[Sat Sep 05 17:54:58.928939 2026] [security2:error] [pid 905495:tid 905495] [client 49.232.104.223:37160] ModSecurity: Warning. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [data "keep-alive, close"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "robertomurillo.net"] [uri "/"] [unique_id "apyr0oI4SGJhWJwwyu-nBQAAAAM"]
[Sat Sep 05 17:54:58.931128 2026] [security2:error] [pid 905495:tid 905495] [client 49.232.104.223:37160] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [l
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇩🇪
167.94.146.56
|
|
[Sat Sep 05 17:51:39.869063 2026] [security2:error] [pid 891050:tid 891050] [client 167.94.146.56:59 ...
show more
[Sat Sep 05 17:51:39.869063 2026] [security2:error] [pid 891050:tid 891050] [client 167.94.146.56:59860] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apyrCzq-k-jcCVbQld7zUQAAAAk"]
[Sat Sep 05 17:51:39.870282 2026] [security2:error] [pid 891050:tid 891050] [client 167.94.146.56:59860] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"]
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|
|
🇭🇰
103.203.56.2
|
|
[Sat Sep 05 17:38:44.516677 2026] [security2:error] [pid 904727:tid 904727] [client 103.203.56.2:529 ...
show more
[Sat Sep 05 17:38:44.516677 2026] [security2:error] [pid 904727:tid 904727] [client 103.203.56.2:52942] ModSecurity: Warning. Pattern match "(?:^([\\\\d.]+|\\\\[[\\\\da-f:]+\\\\]|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/crs/current/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [data "186.32.240.17"] [severity "WARNING"] [ver "OWASP_CRS/4.27.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [hostname "186.32.240.17"] [uri "/"] [unique_id "apyoBEubSQefNhwugSpHPgAAABM"]
[Sat Sep 05 17:38:44.518705 2026] [security2:error] [pid 904727:tid 904727] [client 103.203.56.2:52942] ModSecurity: Warning. Unconditional match in SecAction. [file "/etc/modsecurity/crs/current/rules/RESPONSE-980-CORRELATION.conf"] [line "99"] [id "980170"] [
...
show less
|
Web Spam
Hacking
SQL Injection
Brute-Force
Web App Attack
|