diff --git a/bin/jabali-agent b/bin/jabali-agent
index a653efa..1c143c2 100755
--- a/bin/jabali-agent
+++ b/bin/jabali-agent
@@ -780,6 +780,10 @@ function wafAuditLogList(array $params): array
             $current['host'] = trim($matches[1]);
             continue;
         }
+        if (preg_match('/^Host:\s*(.+)$/', $line, $matches)) {
+            $current['host'] = trim($matches[1]);
+            continue;
+        }
 
         if (!str_contains($line, 'ModSecurity:')) {
             continue;