[Tue May 06 19:42:39.424378 2025] [security2:error] [pid 87168:tid 140029330273984] [client 114.10.4 ...
show more[Tue May 06 19:42:39.424378 2025] [security2:error] [pid 87168:tid 140029330273984] [client 114.10.47.35:32487] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)\\\\b(?:7z(?:[\\\\s\\\\x0b&\\\\),<>\\\\|]|$|[arx](?:[\\\\s\\\\x0b&\\\\),<>\\\\|]|$))|(?:(?:GE|POS)T|y(?:e(?:s|lp)|um|arn)|HEAD)(?:[\\\\s\\\\x0b&\\\\),<>\\\\|]|$)|a(?:(?:b|w[ks]|l(?:ias|pine)|xel)(?:[\\\\s\\\\x0b&\\\\),<>\\\\|]|$)|pt(?:[\\\\s\\\\x0b&\\\\),<>\\\\|]|$|-get|itude(?:[\\\\s\\\\x0b&\\ ..." at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "2610"] [id "932237"] [msg "Remote Command Execution: Unix Shell Code Found in REQUEST_HEADERS"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: w found within REQUEST_HEADERS:User-Agent: whatsapp/2.2517.4 w request_line = GET /index.php/profil/meteorologi/list-of-all-tags/analisis-bulanan-distribusi-curah-hujan-di-provin
...
show less