File: /var/log/apache2/error.log

Report run time: Sat Jan 10 02:17:01 AM CST 2026

[Sat Jan 10 02:09:27.657122 2026] [security2:error] [pid 405566:tid 405566] [client 91.232.238.106:61571] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "0.0.0.0"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "0.0.0.0"] [uri "/robots.txt"] [unique_id "aWIJNzYrxkwsJGkmWSEjRAAAAAE"]
[Sat Jan 10 01:57:28.656986 2026] [security2:error] [pid 404999:tid 404999] [client 87.236.176.78:52961] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/favicons/favicon-32x32.png"] [unique_id "aWIGaBBACcy57k0_bGSEiAAAAAk"]
[Sat Jan 10 01:57:28.534707 2026] [security2:error] [pid 404998:tid 404998] [client 87.236.176.251:40259] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/favicons/favicon-16x16.png"] [unique_id "aWIGaO_cBgYTZ9XLTVAzdQAAAAc"]
[Sat Jan 10 01:57:28.369664 2026] [security2:error] [pid 405566:tid 405566] [client 185.247.137.15:54505] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/favicons/favicon.ico"] [unique_id "aWIGaDYrxkwsJGkmWSEjQwAAAAE"]
[Sat Jan 10 01:57:28.252157 2026] [security2:error] [pid 405018:tid 405018] [client 87.236.176.233:53283] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201:443"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/favicons/apple-touch-icon.png"] [unique_id "aWIGaH8g7iJOadkzlGbEqgAAAAA"]
[Sat Jan 10 01:57:27.435686 2026] [security2:error] [pid 405003:tid 405003] [client 185.247.137.240:54855] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/"] [unique_id "aWIGZxWWyu9Nwp8TiSksbQAAAAs"]
[Sat Jan 10 01:53:21.745931 2026] [security2:error] [pid 405000:tid 405000] [client 167.94.138.191:17030] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/favicon.ico"] [unique_id "aWIFcaU73EHRWg1IvqNXEAAAAAo"]
[Sat Jan 10 01:53:19.898428 2026] [security2:error] [pid 404999:tid 404999] [client 167.94.138.191:16990] ModSecurity: Warning. Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "735"] [id "920350"] [msg "Host header is a numeric IP address"] [data "97.99.19.201"] [severity "WARNING"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "97.99.19.201"] [uri "/robots.txt"] [unique_id "aWIFbxBACcy57k0_bGSEhwAAAAk"]
[Sat Jan 10 01:21:46.419586 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/xleet.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:45.637905 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/gmo.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:45.243687 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/themes.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:44.855858 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/wp-file.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:44.470146 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/root.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:44.069602 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/default.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:43.674820 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/bgymj.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:43.281627 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/classwithtostring.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:42.891710 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/new.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:42.503865 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/wp-user.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:42.110480 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/options.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:41.325808 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/radio.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:40.933774 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/wp-trackback.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:40.539692 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/server.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:40.142899 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/atomlib.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:39.749755 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/ahax.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:39.357940 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/hplfuns.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:38.969560 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/log.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:38.196813 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/content.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:37.808467 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/wp-good.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:37.419708 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/file4.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:37.025208 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/ws.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:36.633684 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/lock360.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:36.242725 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/info.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:35.852372 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/ioxi-o.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:35.458434 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/edit.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:35.070470 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/admin-header.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:34.291942 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/akcc.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:33.898715 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/moon.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:33.511324 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/file.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:33.120447 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/files.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:32.732672 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/admin.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:32.346458 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/abcd.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:31.937071 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/text.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:31.543900 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/about.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:31.148558 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/system.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:30.756538 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/bless.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:30.366436 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/man.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:29.969525 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/bolt.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:29.579440 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/goods.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:29.187472 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/bala.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:28.788619 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/flower.php' not found or unable to stat, referer: https://www.google.com/
[Sat Jan 10 01:21:28.399500 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/elp.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:27.991229 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/makeasmtp.php' not found or unable to stat, referer: https://www.google.co.uk/
[Sat Jan 10 01:21:27.598270 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/tinyy.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:26.804447 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/simple.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:26.408331 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/upload.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:26.011453 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/inputs.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 01:21:25.616408 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/adminfuns.php' not found or unable to stat, referer: https://duckduckgo.com/
[Sat Jan 10 01:21:25.220499 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/NewFile.php' not found or unable to stat, referer: https://www.bing.com/
[Sat Jan 10 01:21:24.822323 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/.well-known/acme-challenge/about.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:24.427537 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/autoload_classmap.php' not found or unable to stat, referer: https://www.google.fr/
[Sat Jan 10 01:21:24.033350 2026] [php:error] [pid 405018:tid 405018] [client 4.197.236.122:52338] script '/xmlrpc.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sat Jan 10 00:57:25.971019 2026] [security2:error] [pid 404999:tid 404999] [client 3.254.62.106:37928] ModSecurity: Warning. Operator GE matched 5 at TX:inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf"] [line "92"] [id "980130"] [msg "Inbound Anomaly Score Exceeded (Total Inbound Score: 5 - SQLI=0,XSS=0,RFI=0,LFI=0,RCE=0,PHPI=0,HTTP=0,SESS=0): individual paranoia level scores: 5, 0, 0, 0"] [ver "OWASP_CRS/3.3.7"] [tag "event-correlation"] [hostname "selvans.net"] [uri "/error/HTTP_FORBIDDEN.html.var"] [unique_id "aWH4VRBACcy57k0_bGSEgwAAAAk"]
[Sat Jan 10 00:57:25.967372 2026] [security2:error] [pid 404999:tid 404999] [client 3.254.62.106:37928] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "selvans.net"] [uri "/"] [unique_id "aWH4VRBACcy57k0_bGSEgwAAAAk"]
[Sat Jan 10 00:57:25.965203 2026] [security2:error] [pid 404999:tid 404999] [client 3.254.62.106:37928] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1127"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.7"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "selvans.net"] [uri "/"] [unique_id "aWH4VRBACcy57k0_bGSEgwAAAAk"]