picchinails
# cat /usr/local/apache/logs/error_log-20170731 | grep 'Thu Jul 27 12:28:17.964218' -A 1000 
[Thu Jul 27 12:28:17.964218 2017] [mpm_prefork:notice] [pid 47322] AH00169: caught SIGTERM, shutting down
[Thu Jul 27 12:28:19.036850 2017] [:notice] [pid 47325] [host rc1.gig-hosting.com] mod_lsapi:  Selfstarter 47325 stopped
[Thu Jul 27 12:28:20.153623 2017] [hostinglimits:notice] [pid 48131] mod_hostinglimits: use Min UID 1000
[Thu Jul 27 12:28:20.153817 2017] [hostinglimits:notice] [pid 48131] mod_hostinglimits: version 1.0-32. LVE mechanism enabled
[Thu Jul 27 12:28:20.153825 2017] [hostinglimits:notice] [pid 48131] mod_hostinglimits: found apr extention version 3
[Thu Jul 27 12:28:20.153849 2017] [hostinglimits:notice] [pid 48131] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Thu Jul 27 12:28:20.154774 2017] [suexec:notice] [pid 48131] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Jul 27 12:28:20.178201 2017] [ssl:warn] [pid 48131] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:28:20.203124 2017] [:error] [pid 48131] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:28:20.203150 2017] [:notice] [pid 48131] ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/) configured.
picchinails How to use it? picchinails
[Thu Jul 27 12:28:20.203157 2017] [:notice] [pid 48131] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Thu Jul 27 12:28:20.203164 2017] [:notice] [pid 48131] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Thu Jul 27 12:28:20.203169 2017] [:notice] [pid 48131] ModSecurity: LUA compiled version="Lua 5.1"
[Thu Jul 27 12:28:20.203173 2017] [:notice] [pid 48131] ModSecurity: LIBXML compiled version="2.9.1"
[Thu Jul 27 12:28:20.203177 2017] [:notice] [pid 48131] ModSecurity: Original server signature: Apache
[Thu Jul 27 12:28:20.203181 2017] [:notice] [pid 48131] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Thu Jul 27 12:28:20.677303 2017] [hostinglimits:notice] [pid 48132] mod_hostinglimits: use Min UID 1000
[Thu Jul 27 12:28:20.677348 2017] [hostinglimits:notice] [pid 48132] mod_hostinglimits: version 1.0-32. LVE mechanism enabled
[Thu Jul 27 12:28:20.677355 2017] [hostinglimits:notice] [pid 48132] mod_hostinglimits: found apr extention version 3
[Thu Jul 27 12:28:20.677366 2017] [hostinglimits:notice] [pid 48132] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
picchinails How to dowload it? picchinails
[Thu Jul 27 12:28:20.700298 2017] [ssl:warn] [pid 48132] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:28:20.719093 2017] [lsapi:notice] [pid 48132] mod_lsapi:  version 1.0-30 Connection pool mode is switched off
[Thu Jul 27 12:28:20.721404 2017] [:notice] [pid 48134] [host rc1.gig-hosting.com] mod_lsapi:  Selfstarter 48134 started
[Thu Jul 27 12:28:20.723155 2017] [:error] [pid 48132] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:28:20.758326 2017] [mpm_prefork:notice] [pid 48132] AH00163: Apache/2.4.27 (cPanel) OpenSSL/1.0.2k mod_bwlimited/1.4 Protected by COMODO WAF configured -- resuming normal operations
[Thu Jul 27 12:28:20.758375 2017] [core:notice] [pid 48132] AH00094: Command line: '/usr/sbin/httpd'
[Thu Jul 27 12:28:20.970731 2017] [:error] [pid 48138] [client 79.1.192.213] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.ngccar.org"] [uri "/xmlrpc.php"] [unique_id "WXoUpLLQZMwo@oVl8S0B6wAAAAM"]
[Thu Jul 27 12:28:29.514431 2017] [:error] [pid 48225] [client 83.28.253.184] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.rabidan.com"] [uri "/xmlrpc.php"] [unique_id "WXoUrafRtYHB-SbFSWdPMQAAABg"]
[Thu Jul 27 12:28:29.987427 2017] [:error] [pid 48225] [client 83.28.253.184] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.rabidan.com"] [uri "/wp-login.php"] [unique_id "WXoUrafRtYHB-SbFSWdPMwAAABg"]
[Thu Jul 27 12:28:30.554577 2017] [:error] [pid 48225] [client 83.28.253.184] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.rabidan.com"] [uri "/wp-login.php"] [unique_id "WXoUrqfRtYHB-SbFSWdPNQAAABg"]
picchinails How to use it? picchinails
[Thu Jul 27 12:28:32.418985 2017] [:error] [pid 48240] [client 89.36.212.204] ModSecurity: Access denied with code 403 (phase 2). Operator GT matched 5 at IP:multiple_username_count. [file "/var/cpanel/cwaf/rules/10_Bruteforce_Bruteforce.conf"] [line "58"] [id "230011"] [rev "2"] [msg "COMODO WAF: Multiple Username Violation: Too Many Usernames Submitted for Authentication.||www.hoticesolution.com|F|2"] [data "Current Username: zhihxi04900@sohu.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "Bruteforce"] [hostname "www.hoticesolution.com"] [uri "/wp-login.php"] [unique_id "WXoUsJJcQwJZJzvrnQGX6AAAACM"]
[Thu Jul 27 12:28:34.286289 2017] [:error] [pid 48246] [client 201.20.105.44] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.tiazinha.net"] [uri "/xmlrpc.php"] [unique_id "WXoUsiEPslQuPxy3NK@cSQAAACk"]
[Thu Jul 27 12:28:46.060030 2017] [:error] [pid 48142] [client 92.19.242.93] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "richcorkran.com"] [uri "/xmlrpc.php"] [unique_id "WXoUvhZvD-TgcSucjwnHggAAAAc"]
[Thu Jul 27 12:28:59.984721 2017] [:error] [pid 48144] [client 179.210.43.253] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "blacksandstudio.com"] [uri "/xmlrpc.php"] [unique_id "WXoUy-XXZoPa@iZCZtqvlQAAAAk"]
[Thu Jul 27 12:29:00.938050 2017] [:error] [pid 48240] [client 141.134.185.41] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.achievercompitech.com"] [uri "/xmlrpc.php"] [unique_id "WXoUzJJcQwJZJzvrnQGX7AAAACM"]
[Thu Jul 27 12:29:02.472600 2017] [:error] [pid 48144] [client 179.210.43.253] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "blacksandstudio.com"] [uri "/wp-login.php"] [unique_id "WXoUzvXXZoPa@iZCZtqvlwAAAAk"]
[Thu Jul 27 12:29:02.536293 2017] [:error] [pid 48240] [client 141.134.185.41] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.achievercompitech.com"] [uri "/wp-login.php"] [unique_id "WXoUzpJcQwJZJzvrnQGX7gAAACM"]
[Thu Jul 27 12:29:03.174492 2017] [:error] [pid 48240] [client 141.134.185.41] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.achievercompitech.com"] [uri "/wp-login.php"] [unique_id "WXoUz5JcQwJZJzvrnQGX8AAAACM"]
[Thu Jul 27 12:29:14.454570 2017] [:error] [pid 48240] [client 124.109.8.244] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.spinster.net"] [uri "/xmlrpc.php"] [unique_id "WXoU2pJcQwJZJzvrnQGX8QAAACM"]
[Thu Jul 27 12:29:18.400492 2017] [:error] [pid 48240] [client 124.109.8.244] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.spinster.net"] [uri "/wp-login.php"] [unique_id "WXoU3pJcQwJZJzvrnQGX8wAAACM"]
picchinails How to use it? picchinails
[Thu Jul 27 12:29:26.596371 2017] [:error] [pid 48248] [client 86.24.138.225] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "missprissstyle.com"] [uri "/xmlrpc.php"] [unique_id "WXoU5qV1KyKeQHYOOaeOTQAAACs"]
[Thu Jul 27 12:29:27.392437 2017] [:error] [pid 48243] [client 88.186.202.70] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.bilindia.com"] [uri "/xmlrpc.php"] [unique_id "WXoU57dRWcftY3tupzQkjQAAACY"]
[Thu Jul 27 12:29:28.872638 2017] [:error] [pid 48741] [client 84.117.40.74] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/xmlrpc.php"] [unique_id "WXoU6OaAN5h9WsohfAfPowAAAAM"]
[Thu Jul 27 12:29:30.172264 2017] [:error] [pid 48741] [client 84.117.40.74] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/wp-login.php"] [unique_id "WXoU6uaAN5h9WsohfAfPpQAAAAM"]
[Thu Jul 27 12:29:31.547306 2017] [:error] [pid 48741] [client 84.117.40.74] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/wp-login.php"] [unique_id "WXoU6@aAN5h9WsohfAfPpwAAAAM"]
[Thu Jul 27 12:29:59.955621 2017] [:error] [pid 48139] [client 178.220.74.177] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.vccgma.com"] [uri "/xmlrpc.php"] [unique_id "WXoVBysP5sMeu7ORTnQOkQAAAAQ"]
[Thu Jul 27 12:30:02.945449 2017] [:error] [pid 48139] [client 178.220.74.177] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.vccgma.com"] [uri "/wp-login.php"] [unique_id "WXoVCisP5sMeu7ORTnQOlAAAAAQ"]
[Thu Jul 27 12:30:04.232394 2017] [:error] [pid 48145] [client 87.126.40.65] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "miraflexglasses.net"] [uri "/xmlrpc.php"] [unique_id "WXoVDJ1RdA4KcA0dwGx-XgAAAAo"]
[Thu Jul 27 12:30:06.231781 2017] [:error] [pid 48145] [client 87.126.40.65] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "miraflexglasses.net"] [uri "/wp-login.php"] [unique_id "WXoVDp1RdA4KcA0dwGx-YAAAAAo"]
[Thu Jul 27 12:30:12.744091 2017] [:error] [pid 49167] [client 89.172.37.39] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.grantangelwishesandtravel.org"] [uri "/xmlrpc.php"] [unique_id "WXoVFHJTgX121z0GuPVD0wAAACc"]
picchinails How to use it? picchinails
[Thu Jul 27 12:30:12.771480 2017] [core:error] [pid 49167] [client 89.172.37.39:49355] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:30:13.441182 2017] [:error] [pid 48228] [client 89.172.37.39] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.grantangelwishesandtravel.org"] [uri "/wp-login.php"] [unique_id "WXoVFdqISnTyJe-zV5MR2wAAABs"]
[Thu Jul 27 12:30:13.471102 2017] [core:error] [pid 48228] [client 89.172.37.39:49358] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:30:22.801977 2017] [:error] [pid 49133] [client 182.180.118.122] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "mvguam.com"] [uri "/xmlrpc.php"] [unique_id "WXoVHrmQhSQF-EKCdaG1DwAAAAw"]
[Thu Jul 27 12:30:25.625493 2017] [:error] [pid 48237] [client 160.178.231.43] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.casadunicola.com"] [uri "/xmlrpc.php"] [unique_id "WXoVIQgdnwUCubxCcK55IgAAACA"]
[Thu Jul 27 12:30:26.727616 2017] [:error] [pid 48237] [client 160.178.231.43] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.casadunicola.com"] [uri "/wp-login.php"] [unique_id "WXoVIggdnwUCubxCcK55JgAAACA"]
[Thu Jul 27 12:30:28.780972 2017] [:error] [pid 48731] [client 180.254.155.232] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.gowebworld.com"] [uri "/xmlrpc.php"] [unique_id "WXoVJN2brzQh2FhFL5wKFAAAAAI"]
[Thu Jul 27 12:30:31.875683 2017] [:error] [pid 48781] [client 180.254.155.232] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.gowebworld.com"] [uri "/wp-login.php"] [unique_id "WXoVJzxHqrWNMHZo6lgeugAAABE"]
[Thu Jul 27 12:30:33.886458 2017] [:error] [pid 48781] [client 180.254.155.232] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.gowebworld.com"] [uri "/wp-login.php"] [unique_id "WXoVKTxHqrWNMHZo6lgevAAAABE"]
[Thu Jul 27 12:30:52.069971 2017] [:error] [pid 48731] [client 196.171.94.204] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.archmessenger.com"] [uri "/xmlrpc.php"] [unique_id "WXoVPN2brzQh2FhFL5wKFwAAAAI"]
picchinails How to dowload it? picchinails
[Thu Jul 27 12:30:53.039857 2017] [:error] [pid 48227] [client 108.202.165.54] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "missprissstyle.com"] [uri "/xmlrpc.php"] [unique_id "WXoVPJdntKYpqdslXPPQwgAAABo"]
[Thu Jul 27 12:30:53.806221 2017] [:error] [pid 48227] [client 108.202.165.54] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "missprissstyle.com"] [uri "/wp-login.php"] [unique_id "WXoVPZdntKYpqdslXPPQxAAAABo"]
[Thu Jul 27 12:30:58.955364 2017] [:error] [pid 50114] [client 137.103.35.117] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.mentorsacademyindia.com"] [uri "/xmlrpc.php"] [unique_id "WXoVQvyZRZGhP9HMZiwqBgAAABU"]
[Thu Jul 27 12:30:58.969995 2017] [:error] [pid 50113] [client 91.135.246.141] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.e-lingo.com"] [uri "/xmlrpc.php"] [unique_id "WXoVQjqn2uJOU2UJNeMhYAAAABM"]
[Thu Jul 27 12:31:02.432341 2017] [:error] [pid 50113] [client 91.135.246.141] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.e-lingo.com"] [uri "/wp-login.php"] [unique_id "WXoVRjqn2uJOU2UJNeMhYgAAABM"]
[Thu Jul 27 12:31:02.753856 2017] [:error] [pid 48248] [client 213.149.51.115] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.kesner-ny.com"] [uri "/xmlrpc.php"] [unique_id "WXoVRqV1KyKeQHYOOaeOWQAAACs"]
[Thu Jul 27 12:31:05.739275 2017] [:error] [pid 48208] [client 83.66.167.228] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.archmessenger.com"] [uri "/xmlrpc.php"] [unique_id "WXoVSbAiq@okyJRwPbC21QAAABI"]
[Thu Jul 27 12:31:06.664181 2017] [:error] [pid 48208] [client 83.66.167.228] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.archmessenger.com"] [uri "/wp-login.php"] [unique_id "WXoVSrAiq@okyJRwPbC21wAAABI"]
[Thu Jul 27 12:31:07.907713 2017] [:error] [pid 50104] [client 151.51.240.183] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.sfvictimservices.org"] [uri "/xmlrpc.php"] [unique_id "WXoVS-og-CM6QDXl8bYUzQAAAAg"]
[Thu Jul 27 12:31:11.515312 2017] [:error] [pid 50032] [client 69.12.108.52] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.karlschwarz2008.com"] [uri "/xmlrpc.php"] [unique_id "WXoVT31MvfjGU1NZmNVufAAAAAA"]
picchinails How to dowload it? picchinails
[Thu Jul 27 12:31:16.004299 2017] [:error] [pid 48230] [client 78.210.102.84] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.theworldguru.com"] [uri "/xmlrpc.php"] [unique_id "WXoVU4PPE5A3ENzzAgRhnAAAAB0"]
[Thu Jul 27 12:31:29.208097 2017] [:error] [pid 48224] [client 200.146.23.111] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.jagjitsinghchahal.com"] [uri "/xmlrpc.php"] [unique_id "WXoVYSJPsfAWJZxVnjsjjwAAABc"]
[Thu Jul 27 12:31:30.962122 2017] [:error] [pid 48224] [client 200.146.23.111] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.jagjitsinghchahal.com"] [uri "/wp-login.php"] [unique_id "WXoVYiJPsfAWJZxVnjsjkQAAABc"]
[Thu Jul 27 12:31:57.016484 2017] [:error] [pid 51185] [client 81.18.92.224] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.occupytraversecity.org"] [uri "/xmlrpc.php"] [unique_id "WXoVfOqvZAgTLZ1dzZ5WVwAAABg"]
[Thu Jul 27 12:31:59.963014 2017] [:error] [pid 48142] [client 177.205.142.112] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.trilife.es"] [uri "/xmlrpc.php"] [unique_id "WXoVfxZvD-TgcSucjwnHpQAAAAc"]
[Thu Jul 27 12:32:03.396858 2017] [:error] [pid 48142] [client 177.205.142.112] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.trilife.es"] [uri "/wp-login.php"] [unique_id "WXoVgxZvD-TgcSucjwnHqAAAAAc"]
[Thu Jul 27 12:32:07.598635 2017] [:error] [pid 48242] [client 62.169.181.96] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "198.102.29.27"] [uri "/xmlrpc.php"] [unique_id "WXoVhwRXeTaMzeMxHCH-SwAAACU"]
[Thu Jul 27 12:32:09.516578 2017] [:error] [pid 48242] [client 62.169.181.96] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "198.102.29.27"] [uri "/wp-login.php"] [unique_id "WXoViQRXeTaMzeMxHCH-TQAAACU"]
[Thu Jul 27 12:32:25.845346 2017] [core:error] [pid 50114] [client 84.109.137.242:58494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:32:25.845401 2017] [core:error] [pid 50114] [client 84.109.137.242:58494] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
picchinails How to use it? picchinails
[Thu Jul 27 12:32:35.314580 2017] [core:error] [pid 51699] [client 84.109.137.242:59183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:32:35.314650 2017] [core:error] [pid 51699] [client 84.109.137.242:59183] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:32:35.771000 2017] [core:error] [pid 51702] [client 84.109.137.242:1525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:32:35.771058 2017] [core:error] [pid 51702] [client 84.109.137.242:1525] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:32:51.733400 2017] [:error] [pid 50032] [client 71.93.230.185] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "popieramy.eu"] [uri "/xmlrpc.php"] [unique_id "WXoVs31MvfjGU1NZmNVukAAAAAA"]
[Thu Jul 27 12:32:51.998934 2017] [:error] [pid 50032] [client 71.93.230.185] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "popieramy.eu"] [uri "/wp-login.php"] [unique_id "WXoVs31MvfjGU1NZmNVulAAAAAA"]
[Thu Jul 27 12:32:54.706941 2017] [:error] [pid 51666] [client 82.160.216.160] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.tiazinha.net"] [uri "/xmlrpc.php"] [unique_id "WXoVtpI-4ToZZ2DkqeoL6wAAADo"]
[Thu Jul 27 12:33:09.775577 2017] [:error] [pid 51679] [client 143.255.110.40] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "blacksandstudio.com"] [uri "/xmlrpc.php"] [unique_id "WXoVxckPjpEpST90HGusHAAAAEA"]
[Thu Jul 27 12:33:17.829949 2017] [:error] [pid 49146] [client 171.78.177.113] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.mentorsacademyindia.com"] [uri "/xmlrpc.php"] [unique_id "WXoVzUOuuKl0iWJhRou@ggAAABY"]
[Thu Jul 27 12:33:26.123286 2017] [:error] [pid 48741] [client 116.73.132.142] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.jamonapi.com"] [uri "/xmlrpc.php"] [unique_id "WXoV1uaAN5h9WsohfAfP2gAAAAM"]
picchinails PasteShr picchinails
[Thu Jul 27 12:33:52.259898 2017] [:error] [pid 51167] [client 122.178.12.213] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "247electricians.net"] [uri "/xmlrpc.php"] [unique_id "WXoV8PkRKyzOW3qpdv4mogAAAAs"]
[Thu Jul 27 12:34:16.995601 2017] [:error] [pid 52188] [client 108.162.215.228] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "casinosenligne41.com"] [uri "/xmlrpc.php"] [unique_id "WXoWCPTSbIAY9h-5-Bh1VwAAAA8"]
[Thu Jul 27 12:34:32.600584 2017] [:error] [pid 51664] [client 93.136.79.144] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.whiteoliphaunt.com"] [uri "/xmlrpc.php"] [unique_id "WXoWGLmBbzvju6gFW@uLdwAAADg"]
[Thu Jul 27 12:34:36.341967 2017] [:error] [pid 52469] [client 5.149.87.17] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.spinster.net"] [uri "/xmlrpc.php"] [unique_id "WXoWHAuAURCiA3gZ86Hn8QAAABU"]
[Thu Jul 27 12:34:40.118229 2017] [:error] [pid 52469] [client 5.149.87.17] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.spinster.net"] [uri "/wp-login.php"] [unique_id "WXoWIAuAURCiA3gZ86Hn8wAAABU"]
[Thu Jul 27 12:34:47.853452 2017] [:error] [pid 52996] [client 195.76.33.177] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.camega.org"] [uri "/xmlrpc.php"] [unique_id "WXoWJ9KSuZTPX@TzQBWLfQAAACo"]
[Thu Jul 27 12:35:03.398625 2017] [:error] [pid 53013] [client 213.149.146.131] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "whitespacebermuda.com"] [uri "/xmlrpc.php"] [unique_id "WXoWN1V26hQMefJRdyocxgAAAC8"]
[Thu Jul 27 12:35:09.697888 2017] [:error] [pid 51665] [client 172.68.47.98] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "casinosenligne41.com"] [uri "/xmlrpc.php"] [unique_id "WXoWPclDPcQAIEcN6pBqNgAAADk"]
[Thu Jul 27 12:35:36.075992 2017] [:error] [pid 51196] [client 189.123.20.111] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "198.102.29.27"] [uri "/xmlrpc.php"] [unique_id "WXoWV@CVHJDM7Pis7s-5@wAAACY"]
[Thu Jul 27 12:35:41.654577 2017] [:error] [pid 52996] [client 35.190.207.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amsp.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amsp.org"] [uri "/feed/"] [unique_id "WXoWXdKSuZTPX@TzQBWLhQAAACo"]
picchinails How to use it? picchinails
[Thu Jul 27 12:35:41.811281 2017] [:error] [pid 51196] [client 189.123.20.111] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "198.102.29.27"] [uri "/wp-login.php"] [unique_id "WXoWXeCVHJDM7Pis7s-5-QAAACY"]
[Thu Jul 27 12:35:52.672718 2017] [:error] [pid 53012] [client 83.208.82.168] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.gowebworld.com"] [uri "/xmlrpc.php"] [unique_id "WXoWaPYuz29xe07KGOou5QAAAC0"]
[Thu Jul 27 12:35:56.346132 2017] [:error] [pid 53100] [client 92.255.238.84] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "www.online-casino-bonus-gambling.com"] [uri "/xmlrpc.php"] [unique_id "WXoWbOFESVBoU6SZdbBlyAAAADw"]
[Thu Jul 27 12:35:56.346600 2017] [:error] [pid 53100] [client 92.255.238.84] ModSecurity: Access denied with code 403 (phase 2). String match "xmlrpc.php" at REQUEST_FILENAME. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "20"] [id "210231"] [rev "2"] [msg "COMODO WAF: XMLRPC protection||www.online-casino-bonus-gambling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.online-casino-bonus-gambling.com"] [uri "/xmlrpc.php"] [unique_id "WXoWbOFESVBoU6SZdbBlyAAAADw"]
[Thu Jul 27 12:36:00.735263 2017] [:error] [pid 49164] [client 123.231.121.135] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.perfectpropertyadvisers.com"] [uri "/xmlrpc.php"] [unique_id "WXoWcBtS2-FQHve7rlGzLAAAACI"]
[Thu Jul 27 12:36:02.066893 2017] [:error] [pid 48235] [client 159.203.4.110] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "80.95.1.26_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "demo1page.com"] [uri "/"] [unique_id "WXoVfnX9BzOZy3ww4TVVsAAAAB4"]
[Thu Jul 27 12:36:02.673496 2017] [:error] [pid 49164] [client 123.231.121.135] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.perfectpropertyadvisers.com"] [uri "/wp-login.php"] [unique_id "WXoWchtS2-FQHve7rlGzLgAAACI"]
[Thu Jul 27 12:36:03.746023 2017] [:error] [pid 52996] [client 5.12.165.187] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "mvguam.com"] [uri "/xmlrpc.php"] [unique_id "WXoWc9KSuZTPX@TzQBWLhwAAACo"]
[Thu Jul 27 12:36:05.532303 2017] [:error] [pid 53017] [client 35.189.218.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mvguam.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mvguam.com"] [uri "/local/news.feed"] [unique_id "WXoWdSp0LgTr2A2SV0@CegAAADc"]
[Thu Jul 27 12:36:06.576727 2017] [:error] [pid 51708] [client 37.202.106.118] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "tanisjustice.com"] [uri "/xmlrpc.php"] [unique_id "WXoWdq6DPp7FcLknDQkwGQAAAFA"]
picchinails How to use it? picchinails
[Thu Jul 27 12:36:14.384169 2017] [:error] [pid 54449] [client 213.233.109.209] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.jagjitsinghchahal.com"] [uri "/xmlrpc.php"] [unique_id "WXoWftacjvJBd2w-CFW9owAAADk"]
[Thu Jul 27 12:36:14.386362 2017] [:error] [pid 53100] [client 103.84.128.14] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "amanda-lloyd.com"] [uri "/xmlrpc.php"] [unique_id "WXoWfuFESVBoU6SZdbBlygAAADw"]
[Thu Jul 27 12:36:41.424151 2017] [access_compat:error] [pid 53119] [client 139.162.188.69:49921] AH01797: client denied by server configuration: /home/rollolux/public_html/wp-includes/plugin.php, referer: http://www.rolloluxshutters.com/wp-includes/plugin.php
[Thu Jul 27 12:36:46.425276 2017] [:error] [pid 53011] [client 219.74.244.105] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.vccgma.com"] [uri "/xmlrpc.php"] [unique_id "WXoWntuSgjvcAbJC41X0DgAAACw"]
[Thu Jul 27 12:36:49.733421 2017] [access_compat:error] [pid 54476] [client 173.255.249.49:44574] AH01797: client denied by server configuration: /home/rollolux/public_html/wp-includes/plugin.php, referer: http://www.rolloluxshutters.com/wp-includes/plugin.php
[Thu Jul 27 12:36:50.737274 2017] [:error] [pid 53016] [client 85.187.115.96] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.acharmingchest.com"] [uri "/xmlrpc.php"] [unique_id "WXoWovQXW8x-b06hdbK2DAAAADY"]
[Thu Jul 27 12:36:53.879822 2017] [:error] [pid 54923] [client 35.189.242.65] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amsp.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amsp.org"] [uri "/feed/"] [unique_id "WXoWpdRYr6jPHDItgd6@AwAAAEs"]
[Thu Jul 27 12:37:02.582469 2017] [core:error] [pid 48235] [client 144.217.181.58:37633] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:02.582519 2017] [core:error] [pid 48235] [client 144.217.181.58:37633] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:02.680530 2017] [:error] [pid 52187] [client 191.33.226.42] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "thedeltagrill.com"] [uri "/xmlrpc.php"] [unique_id "WXoWrl7GQnU6V3USvUSRwgAAAAw"]
picchinails How to dowload it? picchinails
[Thu Jul 27 12:37:02.751478 2017] [core:error] [pid 50116] [client 144.217.181.58:35630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:02.751569 2017] [core:error] [pid 50116] [client 144.217.181.58:35630] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:02.920073 2017] [core:error] [pid 52974] [client 144.217.181.58:54957] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:02.920127 2017] [core:error] [pid 52974] [client 144.217.181.58:54957] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.104983 2017] [core:error] [pid 53079] [client 144.217.181.58:49364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.105049 2017] [core:error] [pid 53079] [client 144.217.181.58:49364] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.280181 2017] [core:error] [pid 51664] [client 144.217.181.58:57996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.280373 2017] [core:error] [pid 51664] [client 144.217.181.58:57996] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.509107 2017] [core:error] [pid 54962] [client 144.217.181.58:49297] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.509170 2017] [core:error] [pid 54962] [client 144.217.181.58:49297] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
picchinails How to get it for free? picchinails
[Thu Jul 27 12:37:03.722033 2017] [core:error] [pid 53118] [client 144.217.181.58:48007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.722082 2017] [core:error] [pid 53118] [client 144.217.181.58:48007] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.891011 2017] [core:error] [pid 54464] [client 144.217.181.58:35760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:03.891055 2017] [core:error] [pid 54464] [client 144.217.181.58:35760] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:37:11.628537 2017] [:error] [pid 52210] [client 38.105.228.52] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "80.95.1.26_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/Maxi-Baby2-40_J-1.jpg"] [unique_id "WXoWJEVesINqdBmkxIv1EgAAABQ"]
[Thu Jul 27 12:37:11.628619 2017] [:error] [pid 52160] [client 71.125.240.223] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "80.95.1.26_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/Baby-Plus-39_EP-1.jpg"] [unique_id "WXoV5xrBfEPyMbxjth8hnAAAAAg"]
[Thu Jul 27 12:37:12.712360 2017] [:error] [pid 52145] [client 35.187.52.64] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mvguam.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mvguam.com"] [uri "/index.php"] [unique_id "WXoWuNCFGmUCQrK5T0rI2gAAAAQ"]
[Thu Jul 27 12:37:24.507497 2017] [:error] [pid 55011] [client 110.172.173.162] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.solutionsforbeauty.com"] [uri "/xmlrpc.php"] [unique_id "WXoWxCdPv1IW7wUXuXVuOwAAAF8"]
[Thu Jul 27 12:37:27.426470 2017] [:error] [pid 53100] [client 46.161.119.182] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.talk-helps.com"] [uri "/xmlrpc.php"] [unique_id "WXoWx@FESVBoU6SZdbBlzwAAADw"]
[Thu Jul 27 12:37:43.312003 2017] [:error] [pid 48235] [client 191.82.212.189] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "tanisjustice.com"] [uri "/xmlrpc.php"] [unique_id "WXoW13X9BzOZy3ww4TVVugAAAB4"]
picchinails How to get it for free? picchinails
[Thu Jul 27 12:37:45.021393 2017] [:error] [pid 54477] [client 93.149.69.47] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.ahmadali.com"] [uri "/xmlrpc.php"] [unique_id "WXoW2J4Z5qM1hLS1u0gEwQAAAEg"]
[Thu Jul 27 12:37:50.610890 2017] [lsapi:error] [pid 53013] [client 77.88.5.97:62089] [host www.hostgeneration.com] Backend error on sending request(GET /category/windows/datatransfer/desc/15 HTTP/1.1); uri(/main.php?page=category/windows/datatransfer/desc/15) content-length(0) (lsphp is killed?): ReceiveAckHdr: backend process reset connection: errno 104 (possibly lsapi_backend_children parameter too small)
[Thu Jul 27 12:37:52.112090 2017] [:error] [pid 54962] [client 105.102.151.239] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.gowebworld.com"] [uri "/xmlrpc.php"] [unique_id "WXoW4Bw-gQ8WuYpOI0-8WgAAAFM"]
[Thu Jul 27 12:38:05.702085 2017] [:error] [pid 54479] [client 27.34.48.39] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.picchinails.com"] [uri "/xmlrpc.php"] [unique_id "WXoW7bFiwdZYqpu92M50DwAAAEo"]
[Thu Jul 27 12:38:05.858337 2017] [:error] [pid 54882] [client 35.187.96.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amsp.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amsp.org"] [uri "/feed/"] [unique_id "WXoW7f1p27lodaVk9icXrQAAACE"]
[Thu Jul 27 12:38:10.750503 2017] [:error] [pid 55559] [client 180.244.26.32] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.hoticesolution.com"] [uri "/xmlrpc.php"] [unique_id "WXoW8jchIWgQnRsVZxI4dAAAAAw"]
[Thu Jul 27 12:38:21.340344 2017] [:error] [pid 50103] [client 78.46.174.55] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.244.123.89_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "sacredlittleones-sipi.org"] [uri "/index.php"] [unique_id "WXoVfqBlFsBojtemP5GbAgAAAAY"]
[Thu Jul 27 12:38:37.869912 2017] [:error] [pid 54964] [client 92.52.29.152] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "alexandermasters.com"] [uri "/xmlrpc.php"] [unique_id "WXoXDUwW8VU74mlBBsbhRgAAAFU"]
[Thu Jul 27 12:38:40.777044 2017] [:error] [pid 54923] [client 103.240.76.102] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.unity24.org"] [uri "/xmlrpc.php"] [unique_id "WXoXENRYr6jPHDItgd6@IQAAAEs"]
[Thu Jul 27 12:38:42.131261 2017] [:error] [pid 55558] [client 79.45.119.220] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.endlagnow.org"] [uri "/xmlrpc.php"] [unique_id "WXoXEnKETFheGJdHcGA68QAAAAo"]
picchinails How to dowload it? picchinails
[Thu Jul 27 12:38:42.662362 2017] [:error] [pid 55558] [client 79.45.119.220] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.endlagnow.org"] [uri "/wp-login.php"] [unique_id "WXoXEnKETFheGJdHcGA68wAAAAo"]
[Thu Jul 27 12:38:56.239897 2017] [:error] [pid 55656] [client 216.252.77.168] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.avensunpharma.com"] [uri "/xmlrpc.php"] [unique_id "WXoXIGJGZ78j9SyJuwTsDQAAABc"]
[Thu Jul 27 12:38:57.735486 2017] [:error] [pid 48774] [client 211.41.196.172] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.oldpecanstreetfestival.com"] [uri "/xmlrpc.php"] [unique_id "WXoXIXIpSDiPVUzouWs9pwAAAA0"]
[Thu Jul 27 12:38:58.528670 2017] [:error] [pid 55656] [client 216.252.77.168] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.avensunpharma.com"] [uri "/wp-login.php"] [unique_id "WXoXImJGZ78j9SyJuwTsDwAAABc"]
[Thu Jul 27 12:39:00.445539 2017] [:error] [pid 52994] [client 88.12.54.87] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.artcurrents.org"] [uri "/xmlrpc.php"] [unique_id "WXoXJETEsPm7ZbLrCYC0xQAAACM"]
[Thu Jul 27 12:39:13.299009 2017] [:error] [pid 54924] [client 27.255.47.56] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "silverservicecab.com"] [uri "/xmlrpc.php"] [unique_id "WXoXMWgPHDBl1EGSga1D5QAAAE0"]
[Thu Jul 27 12:39:13.541167 2017] [:error] [pid 54901] [client 174.48.30.180] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "blog.rapidpich.ir"] [uri "/xmlrpc.php"] [unique_id "WXoXMTARRKuoO6kLkm6dvAAAACo"]
[Thu Jul 27 12:39:18.307411 2017] [:error] [pid 53079] [client 78.95.11.151] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.endlagnow.org"] [uri "/xmlrpc.php"] [unique_id "WXoXNqaExqg360ZGCbV4XwAAADs"]
[Thu Jul 27 12:39:32.191618 2017] [:error] [pid 55005] [client 119.159.167.245] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.e-lingo.com"] [uri "/xmlrpc.php"] [unique_id "WXoXRB56YEZFVOES@HQjIgAAAFs"]
[Thu Jul 27 12:39:34.023039 2017] [:error] [pid 51185] [client 81.18.92.224] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.244.123.89_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "www.occupytraversecity.org"] [uri "/index.php"] [unique_id "WXoVfOqvZAgTLZ1dzZ5WVwAAABg"]
picchinails How to get it? picchinails
[Thu Jul 27 12:39:34.023293 2017] [:error] [pid 50065] [client 71.125.240.223] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.244.123.89_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2015/05/redg.jpg"] [unique_id "WXoVfn9JX46hZG3X8o9UDgAAAAE"]
[Thu Jul 27 12:39:34.024920 2017] [:error] [pid 48149] [client 71.125.240.223] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "80.95.1.26_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/Baby-Plus-2-44_L-1.jpg"] [unique_id "WXoV53uxe5W00K8RtgTbHQAAAA4"]
[Thu Jul 27 12:39:34.025088 2017] [:error] [pid 50119] [client 71.125.240.223] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "80.95.1.26_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2015/05/map3.jpg"] [unique_id "WXoVfoPy-r-QfsCta3q7YwAAACQ"]
[Thu Jul 27 12:39:34.025139 2017] [:error] [pid 51167] [client 166.137.126.81] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "81.164.145.224_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "www.whiteoliphaunt.com"] [uri "/index.php"] [unique_id "WXoWI-kRKyzOW3qpdv4mqAAAAAs"]
[Thu Jul 27 12:39:34.025211 2017] [:error] [pid 49162] [client 71.125.240.223] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "81.164.145.224_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/Maxi-Baby2-40_JC-1.jpg"] [unique_id "WXoV5zOFee8YZnZSGjwkgAAAAB8"]
[Thu Jul 27 12:39:34.026275 2017] [:error] [pid 50066] [client 198.102.29.20] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.27.46.205_7a19da7216d6f60b25970d45c7438c2a0d200348"): Internal error (specific information not available) [hostname "tanisjustice.com"] [uri "/index.php"] [unique_id "WXoWJMmbrRVyt7TEHHXaNAAAAAU"]
[Thu Jul 27 12:39:34.026338 2017] [:error] [pid 51703] [client 71.125.240.223] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.244.123.89_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/Baby-Zero-2-34_M-1.jpg"] [unique_id "WXoV6CkkHq5eg3GlNMLzhgAAAEw"]
[Thu Jul 27 12:39:34.026456 2017] [:error] [pid 55018] [client 198.102.29.20] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "81.164.145.224_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "tanisjustice.com"] [uri "/index.php"] [unique_id "WXoW0Ge-7@QsTiGhHpV0-AAAAGQ"]
[Thu Jul 27 12:39:41.457076 2017] [:error] [pid 53829] [client 46.214.192.133] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.torahdiario.org"] [uri "/xmlrpc.php"] [unique_id "WXoXTbM3E0ayUzK6m8qPmwAAACk"]
[Thu Jul 27 12:39:42.032622 2017] [:error] [pid 53829] [client 46.214.192.133] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.torahdiario.org"] [uri "/wp-login.php"] [unique_id "WXoXTbM3E0ayUzK6m8qPnQAAACk"]
picchinails How to get it? picchinails
[Thu Jul 27 12:39:51.486293 2017] [:error] [pid 50066] [client 39.60.191.122] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.jamonapi.com"] [uri "/xmlrpc.php"] [unique_id "WXoXV8mbrRVyt7TEHHXaNgAAAAU"]
[Thu Jul 27 12:39:58.134183 2017] [:error] [pid 48774] [client 142.44.131.58] ModSecurity: XML parser error: XML: Failed parsing document. [hostname "www.online-casino-bonus-gambling.com"] [uri "/xmlrpc.php"] [unique_id "WXoXXnIpSDiPVUzouWs9qwAAAA0"]
[Thu Jul 27 12:39:58.134680 2017] [:error] [pid 48774] [client 142.44.131.58] ModSecurity: Access denied with code 403 (phase 2). String match "xmlrpc.php" at REQUEST_FILENAME. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "20"] [id "210231"] [rev "2"] [msg "COMODO WAF: XMLRPC protection||www.online-casino-bonus-gambling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.online-casino-bonus-gambling.com"] [uri "/xmlrpc.php"] [unique_id "WXoXXnIpSDiPVUzouWs9qwAAAA0"]
[Thu Jul 27 12:40:03.664187 2017] [:error] [pid 54966] [client 99.227.40.222] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.vccgma.com"] [uri "/xmlrpc.php"] [unique_id "WXoXY2Mh4k1F@i5tCnFjdwAAAFc"]
[Thu Jul 27 12:40:05.115807 2017] [access_compat:error] [pid 50103] [client 103.215.243.210:19459] AH01797: client denied by server configuration: /home/juanjosa/bemyparent.org.uk/xmlrpc.php
[Thu Jul 27 12:40:07.943931 2017] [:error] [pid 54479] [client 103.215.243.210] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.bemyparent.org.uk"] [uri "/wp-login.php"] [unique_id "WXoXZ7FiwdZYqpu92M50KwAAAEo"]
[Thu Jul 27 12:40:17.032216 2017] [:error] [pid 54901] [client 31.1.128.148] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "missioninterieuresud.com"] [uri "/xmlrpc.php"] [unique_id "WXoXcDARRKuoO6kLkm6dwgAAACo"]
[Thu Jul 27 12:40:43.556516 2017] [:error] [pid 52470] [client 49.44.80.105] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "81.164.145.224_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "www.subhashjeweller.com"] [uri "/images/bg/necklaces-bg.jpg"] [unique_id "WXoWJLf1@SEXulEQ33MfvAAAABw"]
[Thu Jul 27 12:40:43.577578 2017] [:error] [pid 51199] [client 198.102.29.20] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "80.95.1.26_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "tanisjustice.com"] [uri "/index.php"] [unique_id "WXoVfojuF-hYGn2C0GaRzAAAAC4"]
[Thu Jul 27 12:40:43.579251 2017] [:error] [pid 49160] [client 198.102.29.20] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.27.46.205_7a19da7216d6f60b25970d45c7438c2a0d200348"): Internal error (specific information not available) [hostname "occupytraversecity.org"] [uri "/wp-cron.php"] [unique_id "WXoVfsgfpQQ1P24-yjQc5wAAABk"]
picchinails How to get it? picchinails
[Thu Jul 27 12:40:43.579349 2017] [:error] [pid 51666] [client 46.229.168.79] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "95.27.46.205_7a19da7216d6f60b25970d45c7438c2a0d200348"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/index.php"] [unique_id "WXoV6JI-4ToZZ2DkqeoL8gAAADo"]
[Thu Jul 27 12:40:43.579440 2017] [:error] [pid 53740] [client 106.209.243.218] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "81.164.145.224_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "www.rajgarhhills.com"] [uri "/images/new-banner-23-5-17.jpg"] [unique_id "WXoWfwa2z8tn8eb-yRc0QQAAAAI"]
body.xml:1: parser error : Document labelled UTF-16 but has UTF-8 content
<?xml version="1.0" encoding="utf-16" standalone="yes"?>
                                     ^
[Thu Jul 27 12:40:50.546324 2017] [:error] [pid 57511] [client 178.145.216.10] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.fortislafemme.com"] [uri "/xmlrpc.php"] [unique_id "WXoXkvR7bowAawy7aFkx3QAAACg"]
[Thu Jul 27 12:41:01.639058 2017] [:error] [pid 53012] [client 49.201.29.249] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "sunsetsurattsurfschool.com"] [uri "/xmlrpc.php"] [unique_id "WXoXnfYuz29xe07KGOovCAAAAC0"]
[Thu Jul 27 12:41:04.596905 2017] [:error] [pid 52470] [client 123.231.111.10] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.christopherventris.com"] [uri "/xmlrpc.php"] [unique_id "WXoXoLf1@SEXulEQ33MfvwAAABw"]
[Thu Jul 27 12:41:05.895604 2017] [:error] [pid 49162] [client 1.23.208.94] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.tiazinha.net"] [uri "/xmlrpc.php"] [unique_id "WXoXoTOFee8YZnZSGjwkhgAAAB8"]
[Thu Jul 27 12:41:08.278622 2017] [:error] [pid 54966] [client 39.47.87.97] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.kesner-ny.com"] [uri "/xmlrpc.php"] [unique_id "WXoXpGMh4k1F@i5tCnFjfAAAAFc"]
picchinails How to use it? picchinails
(57461): Child process with pid: 57471 was killed by signal: 15, core dump: 0
(58641): Child process with pid: 58664 was killed by signal: 15, core dump: 0
[Thu Jul 27 12:41:23.572708 2017] [hostinglimits:notice] [pid 58945] mod_hostinglimits: use Min UID 1000
[Thu Jul 27 12:41:23.572829 2017] [hostinglimits:notice] [pid 58945] mod_hostinglimits: version 1.0-32. LVE mechanism enabled
[Thu Jul 27 12:41:23.572855 2017] [hostinglimits:notice] [pid 58945] mod_hostinglimits: found apr extention version 3
[Thu Jul 27 12:41:23.572868 2017] [hostinglimits:notice] [pid 58945] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Thu Jul 27 12:41:23.575097 2017] [suexec:notice] [pid 58945] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Jul 27 12:41:23.625105 2017] [ssl:warn] [pid 58945] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:41:23.683890 2017] [:error] [pid 58945] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:41:23.683923 2017] [:notice] [pid 58945] ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/) configured.
picchinails How to get it? picchinails
[Thu Jul 27 12:41:23.683932 2017] [:notice] [pid 58945] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Thu Jul 27 12:41:23.683941 2017] [:notice] [pid 58945] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Thu Jul 27 12:41:23.683947 2017] [:notice] [pid 58945] ModSecurity: LUA compiled version="Lua 5.1"
[Thu Jul 27 12:41:23.683953 2017] [:notice] [pid 58945] ModSecurity: LIBXML compiled version="2.9.1"
[Thu Jul 27 12:41:23.683958 2017] [:notice] [pid 58945] ModSecurity: Original server signature: Apache
[Thu Jul 27 12:41:23.683964 2017] [:notice] [pid 58945] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Thu Jul 27 12:41:24.229618 2017] [hostinglimits:notice] [pid 58946] mod_hostinglimits: use Min UID 1000
[Thu Jul 27 12:41:24.229678 2017] [hostinglimits:notice] [pid 58946] mod_hostinglimits: version 1.0-32. LVE mechanism enabled
[Thu Jul 27 12:41:24.229685 2017] [hostinglimits:notice] [pid 58946] mod_hostinglimits: found apr extention version 3
[Thu Jul 27 12:41:24.229694 2017] [hostinglimits:notice] [pid 58946] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
picchinails PasteShr picchinails
[Thu Jul 27 12:41:24.260409 2017] [ssl:warn] [pid 58946] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:41:24.286371 2017] [lsapi:notice] [pid 58946] mod_lsapi:  version 1.0-30 Connection pool mode is switched off
[Thu Jul 27 12:41:24.289712 2017] [:notice] [pid 58948] [host rc1.gig-hosting.com] mod_lsapi:  Selfstarter 58948 started
[Thu Jul 27 12:41:24.292184 2017] [:error] [pid 58946] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:41:24.327884 2017] [mpm_prefork:notice] [pid 58946] AH00163: Apache/2.4.27 (cPanel) OpenSSL/1.0.2k mod_bwlimited/1.4 Protected by COMODO WAF configured -- resuming normal operations
[Thu Jul 27 12:41:24.327938 2017] [core:notice] [pid 58946] AH00094: Command line: '/usr/sbin/httpd'
[Thu Jul 27 12:41:24.401339 2017] [:error] [pid 58950] [client 211.36.243.233] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.stormvideographer.com"] [uri "/wp-login.php"] [unique_id "WXoXtEuSsXKAbJA4NN100AAAAAE"]
[Thu Jul 27 12:41:29.522135 2017] [:error] [pid 58954] [client 197.166.66.39] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "missprissstyle.com"] [uri "/xmlrpc.php"] [unique_id "WXoXuQydEd1FDzNypbxU3AAAAAU"]
[Thu Jul 27 12:41:33.617103 2017] [core:error] [pid 58957] [client 66.249.79.147:45690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:41:33.617156 2017] [core:error] [pid 58957] [client 66.249.79.147:45690] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
picchinails How to get it? picchinails
[Thu Jul 27 12:41:49.155759 2017] [:error] [pid 58963] [client 35.190.201.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amsp.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amsp.org"] [uri "/robots.txt"] [unique_id "WXoXzaMUrrnyATY0yIc3SwAAAA4"]
[Thu Jul 27 12:42:01.706106 2017] [:error] [pid 59065] [client 86.98.78.78] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.greatwayshippingservices.com"] [uri "/xmlrpc.php"] [unique_id "WXoX2Vl1aYrIsClM3HfK0QAAABc"]
[Thu Jul 27 12:42:24.228749 2017] [:error] [pid 58953] [client 88.110.51.148] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.rolloluxshutters.com"] [uri "/xmlrpc.php"] [unique_id "WXoX8GPlFXj0X4Lp5bewPAAAAAQ"]
[Thu Jul 27 12:42:59.907329 2017] [:error] [pid 59601] [client 177.158.104.83] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.casadunicola.com"] [uri "/xmlrpc.php"] [unique_id "WXoYE3T6pMUNoNMa-K4FuwAAACQ"]
[Thu Jul 27 12:43:00.887121 2017] [:error] [pid 59601] [client 177.158.104.83] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.casadunicola.com"] [uri "/wp-login.php"] [unique_id "WXoYFHT6pMUNoNMa-K4FvwAAACQ"]
[Thu Jul 27 12:43:08.713784 2017] [:error] [pid 58961] [client 35.189.215.158] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amsp.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amsp.org"] [uri "/feed/"] [unique_id "WXoYHGtkBT7f9g9cQIrB9AAAAAw"]
[Thu Jul 27 12:43:21.765674 2017] [:error] [pid 59380] [client 176.127.85.216] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "tacksharp.tv"] [uri "/xmlrpc.php"] [unique_id "WXoYKUbw5-JheeHxWBGSjAAAAB8"]
[Thu Jul 27 12:43:23.927434 2017] [:error] [pid 59380] [client 176.127.85.216] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "tacksharp.tv"] [uri "/wp-login.php"] [unique_id "WXoYK0bw5-JheeHxWBGSjgAAAB8"]
[Thu Jul 27 12:43:32.986172 2017] [:error] [pid 58962] [client 116.74.195.167] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.trilife.es"] [uri "/xmlrpc.php"] [unique_id "WXoYNIiXbT1TafJ0nXLBZgAAAA0"]
[Thu Jul 27 12:44:11.426857 2017] [:error] [pid 60444] [client 79.177.47.93] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.achievercompitech.com"] [uri "/xmlrpc.php"] [unique_id "WXoYW7bGkZLYUHIvOw@LXAAAADU"]
picchinails PasteShr picchinails
[Thu Jul 27 12:44:13.979874 2017] [:error] [pid 60408] [client 182.76.174.236] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "dhmart.info"] [uri "/xmlrpc.php"] [unique_id "WXoYXQXtBm6ZtPthuEKyhAAAACg"]
[Thu Jul 27 12:44:21.682707 2017] [:error] [pid 59743] [client 160.120.8.145] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.christopherventris.com"] [uri "/xmlrpc.php"] [unique_id "WXoYZZyMoXP4-tDwXf40dAAAAAM"]
[Thu Jul 27 12:45:02.598281 2017] [:error] [pid 60438] [client 5.141.232.59] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.daysinntemple.com"] [uri "/xmlrpc.php"] [unique_id "WXoYjtKQ0zYq9mmaE-fvnwAAAC8"]
[Thu Jul 27 12:45:23.045941 2017] [:error] [pid 60439] [client 117.205.18.102] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.archmessenger.com"] [uri "/xmlrpc.php"] [unique_id "WXoYos8-0laanWUglqQZ-gAAADA"]
[Thu Jul 27 12:45:52.914686 2017] [:error] [pid 61601] [client 104.199.87.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amsp.org|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amsp.org"] [uri "/robots.txt"] [unique_id "WXoYwJ8P99QQmad1taVZywAAADc"]
[Thu Jul 27 12:45:53.072978 2017] [:error] [pid 58950] [client 105.226.58.207] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "dhmart.info"] [uri "/xmlrpc.php"] [unique_id "WXoYwUuSsXKAbJA4NN109QAAAAE"]
[Thu Jul 27 12:45:59.346703 2017] [:error] [pid 61487] [client 41.251.156.50] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.dallaspharma.com"] [uri "/xmlrpc.php"] [unique_id "WXoYx4HzMpdmtriC35ziHwAAAB0"]
[Thu Jul 27 12:46:31.529034 2017] [access_compat:error] [pid 61488] [client 186.23.196.233:52442] AH01797: client denied by server configuration: /home/monandjohn10016/public_html/store/wp-includes/index.php
[Thu Jul 27 12:46:35.807332 2017] [:error] [pid 61603] [client 183.83.71.235] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.theweathermakers.ca"] [uri "/xmlrpc.php"] [unique_id "WXoY6zU7NY55vBEEnR7pAwAAADk"]
[Thu Jul 27 12:46:39.295413 2017] [:error] [pid 58963] [client 86.18.124.228] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "veterinarian.daysinntemple.com"] [uri "/xmlrpc.php"] [unique_id "WXoY76MUrrnyATY0yIc3gQAAAA4"]
picchinails How to use it? picchinails
[Thu Jul 27 12:46:42.166388 2017] [:error] [pid 61601] [client 181.164.136.66] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "richcorkran.com"] [uri "/xmlrpc.php"] [unique_id "WXoY8p8P99QQmad1taVZzwAAADc"]
[Thu Jul 27 12:46:47.403390 2017] [:error] [pid 61488] [client 51.9.247.119] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.casadunicola.com"] [uri "/xmlrpc.php"] [unique_id "WXoY9y77jeoOPrXhVE9fGgAAACY"]
[Thu Jul 27 12:46:48.239415 2017] [:error] [pid 61488] [client 51.9.247.119] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.casadunicola.com"] [uri "/wp-login.php"] [unique_id "WXoY@C77jeoOPrXhVE9fHgAAACY"]
[Thu Jul 27 12:46:53.733588 2017] [:error] [pid 61480] [client 178.148.241.67] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.acharmingchest.com"] [uri "/xmlrpc.php"] [unique_id "WXoY-dqkhXiposrZcqYtewAAABo"]
[Thu Jul 27 12:47:00.047077 2017] [:error] [pid 62446] [client 71.213.246.116] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.jagjitsinghchahal.com"] [uri "/xmlrpc.php"] [unique_id "WXoZBF8aZkjFxYqx4dj6SgAAAEE"]
[Thu Jul 27 12:47:02.965486 2017] [:error] [pid 58960] [client 95.33.89.158] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.ncderby.com"] [uri "/xmlrpc.php"] [unique_id "WXoZBlFRmeLvyFVdpbIpiAAAAAs"]
[Thu Jul 27 12:47:04.247038 2017] [:error] [pid 62414] [client 188.55.92.129] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.fortislafemme.com"] [uri "/xmlrpc.php"] [unique_id "WXoZCPmXukydyua-trLgJAAAADY"]
[Thu Jul 27 12:47:12.186722 2017] [:error] [pid 60276] [client 202.67.41.242] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "abhgifts.com"] [uri "/xmlrpc.php"] [unique_id "WXoZEH@Bd9hIAeOfh1C35wAAACU"]
[Thu Jul 27 12:47:18.947029 2017] [:error] [pid 61849] [client 49.15.18.101] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.torahdiario.org"] [uri "/xmlrpc.php"] [unique_id "WXoZFmxNLJiYFAgixSp4CQAAAD0"]
[Thu Jul 27 12:47:19.801213 2017] [:error] [pid 62909] [client 162.158.165.246] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "casinosenligne41.com"] [uri "/xmlrpc.php"] [unique_id "WXoZF-apodp4F1d@dPDpSwAAAEU"]
picchinails How to get it? picchinails
[Thu Jul 27 12:47:28.118994 2017] [:error] [pid 60438] [client 164.132.161.14] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".com/" at TX:extension. [file "/var/cpanel/cwaf/rules/11_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "3"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hostgeneration.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hostgeneration.com"] [uri "/review/Just199.com"] [unique_id "WXoZH9KQ0zYq9mmaE-fvrgAAAC8"]
[Thu Jul 27 12:47:41.506532 2017] [:error] [pid 59756] [client 107.193.36.64] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "203.106.221.114_b5c80922486cf267633d40bd3190f70ede4c144b"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/New-Baby-1-39_M-1.jpg"] [unique_id "WXoYozWrpY4O83w4xlwEDwAAAAk"]
[Thu Jul 27 12:47:43.186973 2017] [:error] [pid 62945] [client 92.0.165.178] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "legionofspurs.com"] [uri "/xmlrpc.php"] [unique_id "WXoZL4O0pBP55ytQh5XVvgAAAFI"]
[Thu Jul 27 12:47:49.130669 2017] [:error] [pid 61480] [client 117.193.65.203] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "198.102.29.27"] [uri "/xmlrpc.php"] [unique_id "WXoZNdqkhXiposrZcqYtgQAAABo"]
[Thu Jul 27 12:48:07.330007 2017] [:error] [pid 60437] [client 162.158.166.205] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "casinosenligne41.com"] [uri "/xmlrpc.php"] [unique_id "WXoZR-ndKPGnDO1ImEEO8QAAAC4"]
[Thu Jul 27 12:48:07.862658 2017] [:error] [pid 60441] [client 117.204.48.147] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "themoveoneffect.com"] [uri "/xmlrpc.php"] [unique_id "WXoZRxRBj8bPGhm388L6yAAAADI"]
[Thu Jul 27 12:48:09.772862 2017] [:error] [pid 62447] [client 47.30.55.28] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.neetpharmaceuticals.com"] [uri "/xmlrpc.php"] [unique_id "WXoZSdN4TM09X1yZK37ryQAAAEI"]
[Thu Jul 27 12:48:20.246269 2017] [:error] [pid 61488] [client 77.242.50.163] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.searchengineoptimization-seo.com.au"] [uri "/xmlrpc.php"] [unique_id "WXoZVC77jeoOPrXhVE9fIgAAACY"]
[Thu Jul 27 12:48:25.197137 2017] [:error] [pid 61508] [client 186.6.231.246] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.searchengineoptimization-seo.com.au"] [uri "/xmlrpc.php"] [unique_id "WXoZWcWCQhqz9P3XZW5sRgAAACk"]
[Thu Jul 27 12:48:40.744208 2017] [:error] [pid 58960] [client 189.6.76.51] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.solutionsforbeauty.com"] [uri "/xmlrpc.php"] [unique_id "WXoZaFFRmeLvyFVdpbIpkAAAAAs"]
picchinails PasteShr picchinails
[Thu Jul 27 12:48:53.625027 2017] [:error] [pid 63784] [client 84.195.234.75] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.childpc.org"] [uri "/xmlrpc.php"] [unique_id "WXoZdaPjoJ3UVFoOiR6hzwAAABQ"]
[Thu Jul 27 12:48:59.106469 2017] [:error] [pid 60972] [client 107.193.36.64] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.187.172.43_7a19da7216d6f60b25970d45c7438c2a0d200348"): Internal error (specific information not available) [hostname "miraflexglasses.net"] [uri "/wp-content/uploads/2016/04/New-Baby-1-39_DP-1.jpg"] [unique_id "WXoYnL1wmx7gkxQPNBrggAAAAAY"]
[Thu Jul 27 12:49:13.637491 2017] [:error] [pid 61480] [client 35.189.196.190] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/xmlrpc.php"] [unique_id "WXoZiNqkhXiposrZcqYtjQAAABo"]
[Thu Jul 27 12:49:33.299671 2017] [:error] [pid 63642] [client 103.88.85.92] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.alcaliph.com"] [uri "/xmlrpc.php"] [unique_id "WXoZnd8xJfRn915hBTfwlwAAAAg"]
[Thu Jul 27 12:49:51.921864 2017] [:error] [pid 59600] [client 111.92.128.40] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.endlagnow.org"] [uri "/xmlrpc.php"] [unique_id "WXoZr9H4jxxJm33KK24V6wAAACI"]
[Thu Jul 27 12:49:53.551451 2017] [:error] [pid 58956] [client 111.92.128.40] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.endlagnow.org"] [uri "/wp-login.php"] [unique_id "WXoZsSoLXx4mqN63muRH2AAAAAc"]
[Thu Jul 27 12:49:59.867465 2017] [:error] [pid 64607] [client 35.190.203.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/var/cpanel/cwaf/rules/13_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mvguam.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mvguam.com"] [uri "/index.php"] [unique_id "WXoZt5hfcDT-lwNSusbOCwAAABc"]
[Thu Jul 27 12:50:06.972414 2017] [:error] [pid 61488] [client 172.68.254.92] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "casinosenligne41.com"] [uri "/xmlrpc.php"] [unique_id "WXoZvi77jeoOPrXhVE9fLQAAACY"]
[Thu Jul 27 12:50:13.361466 2017] [:error] [pid 60420] [client 198.102.29.20] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.187.172.43_7a19da7216d6f60b25970d45c7438c2a0d200348"): Internal error (specific information not available) [hostname "tanisjustice.com"] [uri "/index.php"] [unique_id "WXoYnNuh6lsX@FipoZYNnQAAACw"]
[Thu Jul 27 12:50:13.361612 2017] [:error] [pid 59601] [client 198.102.29.20] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.187.172.43_7a19da7216d6f60b25970d45c7438c2a0d200348"): Internal error (specific information not available) [hostname "tanisjustice.com"] [uri "/index.php"] [unique_id "WXoYm3T6pMUNoNMa-K4F0wAAACQ"]
picchinails How to dowload it? picchinails
[Thu Jul 27 12:50:28.319186 2017] [hostinglimits:notice] [pid 65420] mod_hostinglimits: use Min UID 1000
[Thu Jul 27 12:50:28.319361 2017] [hostinglimits:notice] [pid 65420] mod_hostinglimits: version 1.0-32. LVE mechanism enabled
[Thu Jul 27 12:50:28.319368 2017] [hostinglimits:notice] [pid 65420] mod_hostinglimits: found apr extention version 3
[Thu Jul 27 12:50:28.319378 2017] [hostinglimits:notice] [pid 65420] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Thu Jul 27 12:50:28.321225 2017] [suexec:notice] [pid 65420] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Jul 27 12:50:28.370901 2017] [ssl:warn] [pid 65420] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:50:28.430746 2017] [:error] [pid 65420] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:50:28.430780 2017] [:notice] [pid 65420] ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/) configured.
[Thu Jul 27 12:50:28.430789 2017] [:notice] [pid 65420] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Thu Jul 27 12:50:28.430798 2017] [:notice] [pid 65420] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
picchinails How to get it for free? picchinails
[Thu Jul 27 12:50:28.430805 2017] [:notice] [pid 65420] ModSecurity: LUA compiled version="Lua 5.1"
[Thu Jul 27 12:50:28.430812 2017] [:notice] [pid 65420] ModSecurity: LIBXML compiled version="2.9.1"
[Thu Jul 27 12:50:28.430818 2017] [:notice] [pid 65420] ModSecurity: Original server signature: Apache
[Thu Jul 27 12:50:28.430823 2017] [:notice] [pid 65420] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Thu Jul 27 12:50:28.976336 2017] [hostinglimits:notice] [pid 65422] mod_hostinglimits: use Min UID 1000
[Thu Jul 27 12:50:28.976376 2017] [hostinglimits:notice] [pid 65422] mod_hostinglimits: version 1.0-32. LVE mechanism enabled
[Thu Jul 27 12:50:28.976383 2017] [hostinglimits:notice] [pid 65422] mod_hostinglimits: found apr extention version 3
[Thu Jul 27 12:50:28.976393 2017] [hostinglimits:notice] [pid 65422] mod_hostinglimits: apr_lve_environment_init_group_minuid check ok
[Thu Jul 27 12:50:29.006938 2017] [ssl:warn] [pid 65422] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:50:29.057905 2017] [lsapi:notice] [pid 65422] mod_lsapi:  version 1.0-30 Connection pool mode is switched off
picchinails How to dowload it? picchinails
[Thu Jul 27 12:50:29.094009 2017] [:notice] [pid 65424] [host rc1.gig-hosting.com] mod_lsapi:  Selfstarter 65424 started
[Thu Jul 27 12:50:29.098067 2017] [:error] [pid 65422] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:50:29.146757 2017] [mpm_prefork:notice] [pid 65422] AH00163: Apache/2.4.27 (cPanel) OpenSSL/1.0.2k mod_bwlimited/1.4 Protected by COMODO WAF configured -- resuming normal operations
[Thu Jul 27 12:50:29.146826 2017] [core:notice] [pid 65422] AH00094: Command line: '/usr/sbin/httpd'
[Thu Jul 27 12:50:55.593549 2017] [:error] [pid 65522] [client 162.158.178.89] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "casinosenligne41.com"] [uri "/xmlrpc.php"] [unique_id "WXoZ7yMGKTDUeEId3ImpuQAAABc"]
[Thu Jul 27 12:51:00.885077 2017] [:error] [pid 65435] [client 45.118.157.85] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/xmlrpc.php"] [unique_id "WXoZ9IqjxbvPmTTwZ6E@RAAAAAo"]
[Thu Jul 27 12:51:02.439988 2017] [:error] [pid 65435] [client 45.118.157.85] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/wp-login.php"] [unique_id "WXoZ9oqjxbvPmTTwZ6E@RgAAAAo"]
[Thu Jul 27 12:51:03.796820 2017] [:error] [pid 65435] [client 45.118.157.85] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.mercychildrensclinic.org"] [uri "/wp-login.php"] [unique_id "WXoZ94qjxbvPmTTwZ6E@SAAAAAo"]
[Thu Jul 27 12:51:04.765078 2017] [:error] [pid 65426] [client 39.33.168.100] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.picchinails.com"] [uri "/xmlrpc.php"] [unique_id "WXoZ@MrIQMcU2A36bDfTpgAAAAE"]
[Thu Jul 27 12:51:14.773375 2017] [cgi:error] [pid 65457] [client 208.83.67.98:20497] AH02811: script not found or unable to stat: /home/orangewo/public_html/perl/changeLang.cgi
picchinails How to get it? picchinails
[Thu Jul 27 12:51:32.896688 2017] [:error] [pid 65457] [client 90.118.138.51] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.grantangelwishesandtravel.org"] [uri "/xmlrpc.php"] [unique_id "WXoaFJh-YvkSLi2tMRKBIQAAABM"]
[Thu Jul 27 12:51:32.919913 2017] [core:error] [pid 65457] [client 90.118.138.51:62808] AH00124: Request exceeded the limit of 10 internal redirects due to probable configuration error. Use 'LimitInternalRecursion' to increase the limit if necessary. Use 'LogLevel debug' to get a backtrace.
[Thu Jul 27 12:51:43.856351 2017] [:error] [pid 65792] [client 58.166.98.2] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "themoveoneffect.com"] [uri "/xmlrpc.php"] [unique_id "WXoaH9nbYKeTHNuqeM2EHQAAABs"]
[Thu Jul 27 12:52:08.026126 2017] [:error] [pid 65434] [client 95.240.131.183] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.messianic-mall.com"] [uri "/xmlrpc.php"] [unique_id "WXoaONR43N1lbptauhesQAAAAAk"]
[Thu Jul 27 12:52:09.409105 2017] [:error] [pid 65432] [client 5.144.12.119] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.camega.org"] [uri "/xmlrpc.php"] [unique_id "WXoaORjaDmQtAw1xkY-5ZwAAAAc"]
[Thu Jul 27 12:52:12.251561 2017] [:error] [pid 65437] [client 157.48.11.104] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.unity24.org"] [uri "/xmlrpc.php"] [unique_id "WXoaPLAiOlkVuC-rw1YLkQAAAAw"]
[Thu Jul 27 12:52:21.885162 2017] [:error] [pid 66555] [client 178.143.62.76] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "blacksandstudio.com"] [uri "/xmlrpc.php"] [unique_id "WXoaRa4FfjQTYzpJs7UtfQAAAB0"]
[Thu Jul 27 12:52:22.529828 2017] [:error] [pid 66555] [client 178.143.62.76] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "blacksandstudio.com"] [uri "/wp-login.php"] [unique_id "WXoaRq4FfjQTYzpJs7UtfwAAAB0"]
[Thu Jul 27 12:52:38.709586 2017] [ssl:warn] [pid 71501] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:52:38.734925 2017] [:error] [pid 71501] SecServerSignature: original signature too short. Please set ServerTokens to Full.
picchinails How to get it for free? picchinails
[Thu Jul 27 12:52:38.734958 2017] [:notice] [pid 71501] ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/) configured.
[Thu Jul 27 12:52:38.734981 2017] [:notice] [pid 71501] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Thu Jul 27 12:52:38.734989 2017] [:notice] [pid 71501] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Thu Jul 27 12:52:38.734995 2017] [:notice] [pid 71501] ModSecurity: LUA compiled version="Lua 5.1"
[Thu Jul 27 12:52:38.734998 2017] [:notice] [pid 71501] ModSecurity: LIBXML compiled version="2.9.1"
[Thu Jul 27 12:52:38.735003 2017] [:notice] [pid 71501] ModSecurity: Original server signature: Apache
[Thu Jul 27 12:52:38.735007 2017] [:notice] [pid 71501] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Thu Jul 27 12:52:39.258400 2017] [ssl:warn] [pid 71980] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:52:39.284161 2017] [:notice] [pid 71980] mod_ruid2/0.9.8 enabled
[Thu Jul 27 12:52:39.286524 2017] [:error] [pid 71980] SecServerSignature: original signature too short. Please set ServerTokens to Full.
picchinails How to get it? picchinails
[Thu Jul 27 12:52:39.323308 2017] [mpm_prefork:notice] [pid 71980] AH00163: Apache/2.4.27 (cPanel) OpenSSL/1.0.2k mod_bwlimited/1.4 Protected by COMODO WAF configured -- resuming normal operations
[Thu Jul 27 12:52:39.323360 2017] [core:notice] [pid 71980] AH00094: Command line: '/usr/sbin/httpd'
[Thu Jul 27 12:52:41.668666 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "www.whiteoliphaunt.com"] [uri "/xmlrpc.php"] [unique_id "WXoaWS4xydhHBLprM-f89gAAAAQ"]
[Thu Jul 27 12:52:42.481946 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "www.whiteoliphaunt.com"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaWS4xydhHBLprM-f89gAAAAQ"]
[Thu Jul 27 12:52:42.482151 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: Audit log: Failed to unlock global mutex: Permission denied [hostname "www.whiteoliphaunt.com"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaWS4xydhHBLprM-f89gAAAAQ"]
[Thu Jul 27 12:52:43.700993 2017] [:error] [pid 72129] [client 124.105.27.163] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "vespaclubusa.org"] [uri "/xmlrpc.php"] [unique_id "WXoaW4T9rRmLrBh3rhxPugAAAAk"]
[Thu Jul 27 12:52:44.047919 2017] [:error] [pid 72131] [client 83.211.179.91] ModSecurity: Access denied with code 401 (phase 2). Pattern match "xmlrpc.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "12"] [id "5000900"] [msg "xmlrpc request blocked, no referer"] [hostname "tacksharp.tv"] [uri "/xmlrpc.php"] [unique_id "WXoaXDRABQhUhw8D7tmVxgAAAAs"]
[Thu Jul 27 12:52:44.711146 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "18"] [id "5000130"] [msg "wp-login request blocked, no referer"] [hostname "www.whiteoliphaunt.com"] [uri "/wp-login.php"] [unique_id "WXoaXC4xydhHBLprM-f8@QAAAAQ"]
[Thu Jul 27 12:52:44.957083 2017] [:error] [pid 72129] [client 124.105.27.163] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "vespaclubusa.org"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaW4T9rRmLrBh3rhxPugAAAAk"]
[Thu Jul 27 12:52:44.957289 2017] [:error] [pid 72129] [client 124.105.27.163] ModSecurity: Audit log: Failed to unlock global mutex: Permission denied [hostname "vespaclubusa.org"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaW4T9rRmLrBh3rhxPugAAAAk"]
picchinails How to get it? picchinails
[Thu Jul 27 12:52:45.002584 2017] [:error] [pid 72131] [client 83.211.179.91] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "tacksharp.tv"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaXDRABQhUhw8D7tmVxgAAAAs"]
[Thu Jul 27 12:52:45.002783 2017] [:error] [pid 72131] [client 83.211.179.91] ModSecurity: Audit log: Failed to unlock global mutex: Permission denied [hostname "tacksharp.tv"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaXDRABQhUhw8D7tmVxgAAAAs"]
[Thu Jul 27 12:52:45.473223 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Permission denied [hostname "www.whiteoliphaunt.com"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaXC4xydhHBLprM-f8@QAAAAQ"]
[Thu Jul 27 12:52:45.473284 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "www.whiteoliphaunt.com"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaXC4xydhHBLprM-f8@QAAAAQ"]
[Thu Jul 27 12:52:45.473425 2017] [:error] [pid 72123] [client 174.118.43.183] ModSecurity: Audit log: Failed to unlock global mutex: Permission denied [hostname "www.whiteoliphaunt.com"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoaXC4xydhHBLprM-f8@QAAAAQ"]
[Thu Jul 27 12:53:02.056025 2017] [:error] [pid 72130] [client 46.119.112.177] ModSecurity: collections_remove_stale: Failed to access DBM file "/tmp/global": Permission denied [hostname "www.sacredlittleones-nwic.org"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoabVH45KWl60dtupBevQAAAAo"]
[Thu Jul 27 12:53:02.056101 2017] [:error] [pid 72130] [client 46.119.112.177] ModSecurity: collections_remove_stale: Failed to access DBM file "/tmp/ip": Permission denied [hostname "www.sacredlittleones-nwic.org"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoabVH45KWl60dtupBevQAAAAo"]
[Thu Jul 27 12:53:02.056146 2017] [:error] [pid 72130] [client 46.119.112.177] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "www.sacredlittleones-nwic.org"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoabVH45KWl60dtupBevQAAAAo"]
[Thu Jul 27 12:53:02.056355 2017] [:error] [pid 72130] [client 46.119.112.177] ModSecurity: Audit log: Failed to unlock global mutex: Permission denied [hostname "www.sacredlittleones-nwic.org"] [uri "/cgi-sys/ea-php56/index.php"] [unique_id "WXoabVH45KWl60dtupBevQAAAAo"]
[Thu Jul 27 12:53:13.539062 2017] [mpm_prefork:notice] [pid 71980] AH00169: caught SIGTERM, shutting down
picchinails How to get it? picchinails
[Thu Jul 27 12:53:14.984529 2017] [ssl:warn] [pid 73689] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Jul 27 12:53:15.009568 2017] [:error] [pid 73689] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:53:15.009597 2017] [:notice] [pid 73689] ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/) configured.
[Thu Jul 27 12:53:15.009605 2017] [:notice] [pid 73689] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Thu Jul 27 12:53:15.009611 2017] [:notice] [pid 73689] ModSecurity: PCRE compiled version="8.32 "; loaded version="8.32 2012-11-30"
[Thu Jul 27 12:53:15.009616 2017] [:notice] [pid 73689] ModSecurity: LUA compiled version="Lua 5.1"
[Thu Jul 27 12:53:15.009620 2017] [:notice] [pid 73689] ModSecurity: LIBXML compiled version="2.9.1"
[Thu Jul 27 12:53:15.009624 2017] [:notice] [pid 73689] ModSecurity: Original server signature: Apache
[Thu Jul 27 12:53:15.009628 2017] [:notice] [pid 73689] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Thu Jul 27 12:53:15.511903 2017] [ssl:warn] [pid 73692] AH01909: casinosenligne41.bravus8.com:443:0 server certificate does NOT include an ID which matches the server name
picchinails How to use it? picchinails
[Thu Jul 27 12:53:15.537133 2017] [:notice] [pid 73692] mod_ruid2/0.9.8 enabled
[Thu Jul 27 12:53:15.539472 2017] [:error] [pid 73692] SecServerSignature: original signature too short. Please set ServerTokens to Full.
[Thu Jul 27 12:53:15.571859 2017] [mpm_prefork:notice] [pid 73692] AH00163: Apache/2.4.27 (cPanel) OpenSSL/1.0.2k mod_bwlimited/1.4 Protected by COMODO WAF configured -- resuming normal operations
picchinails